AI-SDK · GHSA-g3x3-7q3h-gmhj · AI agents & MCP
FIX → 1.0.77
The @ai-sdk/harness-acp host-tool relay did not check that relay requests matched tool calls the model actually generated. Code running in a sandbox that obtained the relay credential could invoke registered host tools during an active prompt turn.
first public Oct 1, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Applications that use the @ai-sdk/harness-acp host-tool relay and expose tools to a model while running untrusted code in a sandbox. Impact depends on which tools the application registers; tools requiring explicit user approval remain protected. Applications not using the harness or without registered host tools can skip it.
Not affected if approval-required-tools, no-host-tools, not-using-acp-harness
Who cares agents, ai-sdk, harness-acp, sandbox
ai-sdk or @ai-sdk/harness-acp with npm ls @ai-sdk/harness-acpUpgrade to 1.0.77
@ai-sdk/harness-acp or laterThe @ai-sdk/harness-acp host-tool relay did not verify that relay requests matched model-generated tool calls. Untrusted sandbox code that obtained the relay credential could invoke registered host tools during an active prompt turn.
Impact depends on the tools exposed by the application. Tools requiring explicit user approval remain protected.
Upgrade to @ai-sdk/harness-acp 1.0.77 or later.
This page as ·
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
1.0.77