CVE-2026-81030

Name of the Vulnerable Software and Affected Versions Mage AI (affected versions not specified)

Description The browser-items API does not restrict accepted paths to the project directory. Specifically, the BrowserItemResource in mage ai/api/resources/BrowserItemResource.py passes caller-supplied paths to filesystem read and write helpers without using the containment helper employed by FileContentResource and FileResource. Consequently, a user with the Viewer role can read any file accessible to the server process by providing an absolute path, as the permission model is not consulted for this route by default. Users with the Editor role can also write to unconfined paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.