---
id: "CVE-2026-120233"
kind: "vulnerability"
aliases: ["CVE-2026-120233"]
title: "ag-ui-protocol: HttpAgent client flaw leaks information to remote attackers"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ag-ui", "ai-agents", "ai-tooling", "http-client", "typescript"]
not_affected_if: ["no-ag-ui-client", "no-httpagent-usage"]
published_at: "2026-11-01T16:18:14+00:00"
first_seen_at: "2026-11-01T16:20:45+00:00"
updated_at: "2026-11-01T16:22:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120233", "first_seen_at": "2026-11-01T16:20:45+00:00"}]
---

# ag-ui-protocol: HttpAgent client flaw leaks information to remote attackers

The ag-ui TypeScript client's HttpAgent component, in versions up to 0.0.58, has a flaw in sdks/typescript/packages/client/src/agent/http.ts that lets a manipulated request disclose information. A public exploit exists, and a fix pull request is pending but not yet merged.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed `@ag-ui/client` version in your package.json and lockfile against `0.0.58`
- Look for imports of HttpAgent from the ag-ui client in your code

## Fix

- Move to a version above `0.0.58`; the sources do not name a fixed release, only a pending pull request

## Timeline

- 2026-11-01T16:20:45+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120233

## From the sources

A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file sdks/typescript/packages/client/src/agent/http.ts of the component HttpAgent. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_