CVE-2026-101100

EUVD-2026-88381

28.09.2026, 18:17

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. The attack may be launched remotely. Upgrading to version 2026-09-08 is able to resolve this issue. This patch is called c346119fe870b70f5c19738ee5119f3e1456e59d. It is suggested to upgrade the affected component.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.4 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-459 - Incomplete Cleanup
The software does not properly "clean up" and remove temporary or supporting resources after they have been used.

References

https://github.com/ag-ui-protocol/ag-ui/

https://github.com/ag-ui-protocol/ag-ui/commit/c346119fe870b70f5c19738ee5119f3e1456e59d

https://github.com/ag-ui-protocol/ag-ui/issues/2443

https://github.com/ag-ui-protocol/ag-ui/pull/2494

https://github.com/ag-ui-protocol/ag-ui/releases/tag/release/2026-09-08

https://vuldb.com/cve/CVE-2026-101100

https://vuldb.com/submit/934980

https://vuldb.com/vuln/410975

https://vuldb.com/vuln/410975/cti