CVE-2025-2115

Summary

CVE-2025-2129 is a recently disclosed vulnerability affecting Mage AI 0.9.75. This issue is considered problematic, as it involves insecure default initialization of a resource. The consequences of this vulnerability can be exploited remotely, although the complexity and difficulty of an attack are relatively high. The existence of this vulnerability and its exploit have been made public, increasing the risk for potential attacks. Despite these concerns, Mage AI has refused to acknowledge this vulnerability as valid and will not be issuing a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.