Forkast·Oct 17, 2026, 6:30 PM UTC

Mage OSS Ships an OAuth Bypass That Creates Sessions from Unrecognized Providers — the Tenth Trust-Through-Defaults Incident in Twenty-One Days

4 outlets reporting

Your call?

CVE-2026-111823

vulnerability identifier

Mage OSS, a data pipeline orchestration tool, contains a critical authentication bypass vulnerability tracked as CVE-2026-111823. The flaw, identified in GHSA-93gm-r5p2-wxq7, carries a CVSS score of 9.8. It affects all versions of the…

Read the full story at Forkast →Follow @lypp for breaking news

Forkast ↗
The OAuth/SAML Authentication Bypass Wave: Seven Months, Eight Vendors, One Structural Failure
Forkast ↗
WorkOS Four SAML SSO Bypasses Trace to a Dual-View XML Parsing Gap
Forkast ↗
Nine Identity-Layer Bypasses in Twenty-One Days: The Trust-Through-Defaults Pattern Has Reached Every Layer of the Stack

More news

Bitcoinist
Pirate Chain Exploit Creates 39.8 Million Unauthorized Tokens In Major Security Breach
Crypto Briefing
AI data centers save water on-site, boost power plant consumption: Bloomberg
Forkast
PayPal Just Put Agent Checkout on 60 Million Living Room Screens. The Merchant Liability Wall Did Not Get the Memo.
Bitcoin.com News
Lopp’s Wrench Attack Map Hits 702 After AI-Assisted Search Work
The Block
Turkey confirms Hex founder Richard Heart’s arrest, says police seized $7.15 million and six cold wallets
NewsBTC
Crypto Giants Feature In $210 Million Political Donations Report As Regulatory Scrutiny Grows

Mage OSS Ships an OAuth Bypass That Creates Sessions from Unrecognized Providers — the Tenth Trust-Through-Defaults Incident in Twenty-One Days

Also covered by 3 outlets

More news