CVE-2026-92360

EUVD-2026-80738
A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXT_MESSAGE_START causes origin validation error. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/ag-ui-protocol/ag-ui/
https://github.com/ag-ui-protocol/ag-ui/issues/2437
https://github.com/ag-ui-protocol/ag-ui/pull/2701
https://vuldb.com/cve/CVE-2026-92360
https://vuldb.com/submit/934950
https://vuldb.com/vuln/405446
https://vuldb.com/vuln/405446/cti