CVE-2026-111823

Summary

The flaw allows attackers to create unauthorized sessions by bypassing OAuth provider validation, potentially leading to full system compromise. This is critical because it enables unauthenticated access to protected resources.

Exploitability

Exploitation is straightforward requiring only a valid OAuth flow initiation with an unknown provider, allowing immediate session creation without proper authentication checks.

Blast radius

The impact could be severe across all affected Mage OSS installations, potentially enabling attackers to gain full administrative access to systems using the vulnerable version.

Detection

Monitor for unusual authentication events in application logs where session creation occurs without proper OAuth provider validation, particularly when OAuth flow parameters are present but unknown provider identifiers are used.

Prioritized remediation

Upgrade to version 76c4f46 or later immediately to patch this session creation bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.