CVE-2026-92360
Medium
Description
A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXT_MESSAGE_START causes origin validation error. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.
SeverityMedium
CVSS6.3
Exploit probability—
ProductAg-ui
PublishedSep 16, 2026
First seenSep 16, 2026
Weakness typeCWE-346CWE-346CWE-345CWE-345
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ag-ui-protocol ag-ui | 1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.