TI-2026-83635 Aliases CVE-2026-120236 GHSA-42cj-2xxr-4gv8

Improper input validation in ag-ui-protocol ag-ui Transport Decoder

MEDIUM 57CWE-20Published 2026-11-01 · Updated 2026-11-02

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · Low · Low
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

The ag-ui-protocol ag-ui package up to and including 0.0.58 has improper input validation (CWE-20) in its Transport Decoder Handler. A remote attacker with low privileges can exploit it without user interaction, and the source references a public exploit. A successful attack can partially affect confidentiality, integrity and availability.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 660182b973a44b8eda5484b14b88eb9cc251edc4. It is suggested to upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00267 18th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ag-ui-protocol	ag-ui	0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; 0.0.6; 0.0.7; 0.0.8; 0.0.9; 0.0.10; 0.0.11; 0.0.12; 0.0.13; 0.0.14; 0.0.15; 0.0.16; 0.0.17; 0.0.18; 0.0.19; 0.0.20; 0.0.21; 0.0.22; 0.0.23; 0.0.24; 0.0.25; 0.0.26; 0.0.27; 0.0.28; 0.0.29; 0.0.30; 0.0.31; 0.0.32; 0.0.33; 0.0.34; 0.0.35; 0.0.36; 0.0.37; 0.0.38; 0.0.39; 0.0.40; 0.0.41; 0.0.42; 0.0.43; 0.0.44; 0.0.45; 0.0.46; 0.0.47; 0.0.48; 0.0.49; 0.0.50; 0.0.51; 0.0.52; 0.0.53; 0.0.54; 0.0.55; 0.0.56; 0.0.57; 0.0.58	—	No fix listed	CNA

ag-ui Vendorag-ui-protocol Affected 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; 0.0.6; 0.0.7; 0.0.8; 0.0.9; 0.0.10; 0.0.11; 0.0.12; 0.0.13; 0.0.14; 0.0.15; 0.0.16; 0.0.17; 0.0.18; 0.0.19; 0.0.20; 0.0.21; 0.0.22; 0.0.23; 0.0.24; 0.0.25; 0.0.26; 0.0.27; 0.0.28; 0.0.29; 0.0.30; 0.0.31; 0.0.32; 0.0.33; 0.0.34; 0.0.35; 0.0.36; 0.0.37; 0.0.38; 0.0.39; 0.0.40; 0.0.41; 0.0.42; 0.0.43; 0.0.44; 0.0.45; 0.0.46; 0.0.47; 0.0.48; 0.0.49; 0.0.50; 0.0.51; 0.0.52; 0.0.53; 0.0.54; 0.0.55; 0.0.56; 0.0.57; 0.0.58 Fixed in — No fix listed CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ag-ui-protocol:ag-ui::::::::	—	—	—

cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

The sources list no fixed version for ag-ui. The source description suggests upgrading the affected component and identifies patch commit 660182b973a44b8eda5484b14b88eb9cc251edc4.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Timeline

2026-11-01 Threatist record created from CVE-2026-120236
2026-11-01 Alias added: GHSA-42cj-2xxr-4gv8
2026-11-02 CISA SSVC decision points changed
2026-11-02 Priority changed: LOW → MEDIUM

References

Exploit 1

https://github.com/ag-ui-protocol/ag-ui/issues/2524

Patch 3

Other 1

https://github.com/ag-ui-protocol/ag-ui/

TI-2026-83626 Information disclosure in ag-ui HttpAgent client CVSS 4.0MEDIUM 6.9
TI-2026-83636 Uncontrolled resource consumption in ag-ui-protocol ag-ui CVSS 4.0MEDIUM 5.3
TI-2026-83632 Uncontrolled resource consumption in ag-ui SSE parser CVSS 4.0MEDIUM 5.3
TI-2026-83628 Resource consumption in ag-ui-protocol ag-ui HTTP Transport CVSS 4.0MEDIUM 5.3
TI-2026-62298 ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption CVSS 4.0MEDIUM 6.9
TI-2026-62299 ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption CVSS 4.0MEDIUM 5.3

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences