CVE-2026-29791

MEDIUM

4.9

Descripcion

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

Detalles CVE

Puntuacion CVSS v3.14.9

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadHIGH

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado3/6/2026

Ultima modificacion3/18/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

lfprojects:agentgateway

Debilidades (CWE)

CWE-20

Referencias

https://github.com/agentgateway/agentgateway/security/advisories/GHSA-v2x6-wwfw-r2rq(security-advisories@github.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.