TI-2026-62295 Aliases CVE-2026-92359 GHSA-fq29-84pr-2m3x

ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy

LOW 12CWE-346Published 2026-09-16 · Updated 2026-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: Passive
Attack complexity: High
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-346.

Summary

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version [email protected] is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00274 19th percentileScored 2026-11-07

Fix Fixed ag-ui (ag-ui-protocol): [email protected]

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ag-ui-protocol	ag-ui	0.3.0	[email protected]	Patch available	CNA

ag-ui Vendorag-ui-protocol Affected 0.3.0 Fixed in [email protected] Patch available CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ag-ui-protocol:ag-ui::::::::	—	—	—

cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

Fix · CNA ag-ui (ag-ui-protocol) Fixed in [email protected]

Timeline

2026-10-02 Threatist record created from CVE-2026-92359
2026-10-03 Alias added: GHSA-fq29-84pr-2m3x

References

Patch 3

Other 2

TI-2026-83626 Information disclosure in ag-ui HttpAgent client CVSS 4.0MEDIUM 6.9
TI-2026-83636 Uncontrolled resource consumption in ag-ui-protocol ag-ui CVSS 4.0MEDIUM 5.3
TI-2026-83635 Improper input validation in ag-ui-protocol ag-ui Transport Decoder CVSS 4.0MEDIUM 5.3
TI-2026-83632 Uncontrolled resource consumption in ag-ui SSE parser CVSS 4.0MEDIUM 5.3
TI-2026-83628 Resource consumption in ag-ui-protocol ag-ui HTTP Transport CVSS 4.0MEDIUM 5.3
TI-2026-62298 ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption CVSS 4.0MEDIUM 6.9

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences