CVE report

CVE-2025-2129medium

Mage AI - Insecure Default Authentication Setup

Events 7d

1

Distinct IPs

1

Severity

medium

CISA KEV

Not listed

Downloads & integrations

Top sources probing for CVE-2025-2129

Top networks the attempts come from

Fingerprints of the clients exploiting this

The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.

Sample request paths observed

  • /api/kernels

URL patterns we match

An event counts toward CVE-2025-2129 if its URL path contains any of these substrings (case-insensitive).

  • · /api/kernels