Live › vulnerability › CVE-2026-120236
The ag-ui-protocol ag-ui package up to version 0.0.58 fails to validate input in its transport decoder handler. A remote attacker can send crafted data to trigger the flaw, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 17:21 UTC. All times on this page are UTC.
Teams that run the ag-ui protocol component in an agent or AI application and expose its transport endpoint to incoming requests are the ones to look at. Deployments that do not use ag-ui, or that run it only on a closed internal path, can likely skip it, but the sources do not say that explicitly.
No product ranges from the sources yet.
pip show ag-ui-protocol or npm ls @ag-ui/core, and compare it to 0.0.580.0.58; the source references patch commit 660182b973a44b8eda5484b14b88eb9cc251edc4 but does not name a fixed release versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 660182b973a44b8eda5484b14b88eb9cc251edc4. It is suggested to upgrade the affected component.
This page as .md · .json · in your agent: get_signal("CVE-2026-120236")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.