CVE-2026-29791

MEDIUM

4.9

Descricao

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

Detalhes CVE

Pontuacao CVSS v3.14.9

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeHIGH

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado3/6/2026

Ultima modificacao3/18/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

lfprojects:agentgateway

Fraquezas (CWE)

CWE-20

Referencias

https://github.com/agentgateway/agentgateway/security/advisories/GHSA-v2x6-wwfw-r2rq(security-advisories@github.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.