{"id":"CVE-2026-120233","kind":"vulnerability","aliases":["CVE-2026-120233"],"related":[],"title":"ag-ui-protocol: HttpAgent client flaw leaks information to remote attackers","description":"A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file sdks/typescript/packages/client/src/agent/http.ts of the component HttpAgent. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","summary":"The ag-ui TypeScript client's HttpAgent component, in versions up to 0.0.58, has a flaw in sdks/typescript/packages/client/src/agent/http.ts that lets a manipulated request disclose information. A public exploit exists, and a fix pull request is pending but not yet merged.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ag-ui","ai-agents","ai-tooling","http-client","typescript"],"not_affected_if":["no-ag-ui-client","no-httpagent-usage"],"how_to_check":"- Check the installed `@ag-ui/client` version in your package.json and lockfile against `0.0.58`\n- Look for imports of HttpAgent from the ag-ui client in your code","fix":"- Move to a version above `0.0.58`; the sources do not name a fixed release, only a pending pull request","status":"open","published_at":"2026-11-01T16:18:14+00:00","first_seen_at":"2026-11-01T16:20:45+00:00","triaged_at":"2026-11-01T16:22:46+00:00","updated_at":"2026-11-01T16:22:46+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-11-01T16:22:46Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version above `0.0.58`; the sources do not name a fixed release, only a pending pull request\n- unknown for any other setting","reach":"internet","title":"ag-ui-protocol: HttpAgent client flaw leaks information to remote attackers","impact":"low","summary":"The ag-ui TypeScript client's HttpAgent component, in versions up to 0.0.58, has a flaw in sdks/typescript/packages/client/src/agent/http.ts that lets a manipulated request disclose information. A public exploit exists, and a fix pull request is pending but not yet merged.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["ag-ui","typescript","ai-agents","http-client"],"confidence":0.5,"fix_status":"none","needs_auth":"unknown","worst_case":"Remote attacker reads information the agent client exposes","analyst_note":"Check the NVD entry and the linked upstream pull request for the fixed version and the exact data disclosed.","how_to_check":"- Check the installed `@ag-ui/client` version in your package.json and lockfile against `0.0.58`\n- Look for imports of HttpAgent from the ag-ui client in your code\n- unknown for any further exposure detail","plain_action":"","needs_analyst":true,"not_affected_if":["no-ag-ui-client","no-httpagent-usage"],"who_is_affected":"Teams whose applications use the ag-ui TypeScript client's HttpAgent to talk to remote agent endpoints are the ones exposed. Projects that do not use the ag-ui client package can skip it. The sources do not say which data is disclosed or what conditions the request must meet.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000726,"input_tokens":4163,"output_tokens":620,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-120233':15A,18A '-2026':14A,17A '0.0.58':45B,89C 'accept':138C 'affect':91C 'ag':2A,20B,34B,81C,85C 'ag-ui':19B,33B,84C 'ag-ui-protocol':1A,80C 'agent':24B 'ai':23B,26B 'ai-ag':22B 'ai-tool':25B 'attack':12A,111C,129C 'await':137C 'client':6A,30B,37B 'compon':40B,101C 'cve':13A,16A 'disclos':56B 'disclosur':109C 'discov':78C 'exist':61B 'exploit':60B,117C 'file':97C 'fix':64B,134C 'flaw':7A,48B,75C 'function':94C 'http':29B 'http-client':28B 'httpagent':5A,39B,102C 'inform':9A,57B,108C 'initi':114C 'issu':136C 'leak':8A 'let':52B 'manipul':54B,105C 'may':125C 'merg':72B 'pend':68B 'perform':103C 'protocol':4A,83C 'public':59B,123C 'pull':65B,131C 'releas':120C 'remot':11A,115C 'request':55B,66B,132C 'result':106C 'sdks/typescript/packages/client/src/agent/http.ts':50B,98C 'secur':74C 'tool':27B 'typescript':31B,36B 'ui':3A,21B,35B,82C,86C 'unknown':93C 'use':127C 'version':42B 'yet':71B","nicknames":[],"mitigations":[],"who_affected":"Teams whose applications use the ag-ui TypeScript client's HttpAgent to talk to remote agent endpoints are the ones exposed. Projects that do not use the ag-ui client package can skip it. The sources do not say which data is disclosed or what conditions the request must meet.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-11-01T16:18:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120233","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120233","severity":null,"published_at":"2026-11-01T16:18:14+00:00","modified_at":"2026-11-01T16:18:14+00:00","first_seen_at":"2026-11-01T16:20:45+00:00","fetched_at":"2026-11-01T16:20:45+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}