CVE-2026-120235

A vulnerability was detected in ag-ui-protocol ag-ui up to version 0.0.58 in an unknown functionality of the Transport Decoder Handler component. The manipulation results in improper input validation. The attack may be launched remotely and the exploit is now public.

In the ag-ui library (ag-ui-protocol) up to 0.0.58, the e.text function in the HTTP Transport component allows excessive resource consumption. The attack can be launched remotely and the exploit has been made publicly available.

In the ag-ui library (ag-ui-protocol) up to 0.0.58, the file sdks/typescript/packages/client/src/agent/http.ts (HttpAgent component) contains a flaw leading to information disclosure. The attack can be launched remotely and the exploit has been publicly released.

A vulnerability in ag-ui-protocol ag-ui up to 2026-09-07 affects the JSON.parse function in the file legacy/convert.ts of the Middleware component. Manipulation leads to an uncaught exception, and remote exploitation is possible. Upgrading to version 2026-09-08 addresses the issue.

A flaw in ag-ui-protocol ag-ui up to 2026-09-07 affects the FilterToolCallsMiddleware function in the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the Middleware component. Executing a manipulation can lead to incomplete cleanup, and the attack may be launched remotely. Upgrading to version 2026-09-08 resolves the issue.

A vulnerability in ag-ui-protocol ag-ui up to 2026-09-23 affects an unknown part of the file SseParser.kt in the Kotlin Community SDK component. Manipulation results in handling of exceptional conditions, and the attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sse_parser.cpp of the JSON Parser component. Executing a manipulation can lead to resource consumption, and the attack may be performed from remote. The patch is identified as ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186.

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fix this issue awaits acceptance.

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXT_MESSAGE_START causes origin validation error. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forgery. The attack can be executed remotely. The patch is identified as bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189. It is advisable to implement a patch to correct this issue.