CVE-2026-92184: ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forgery. The attack can be executed remotely. The patch is identified as bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189. It is advisable to implement a patch to correct this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ag-ui-protocol ag-ui Multimodal Content (integrations/aws-strands/python/src/ag_ui_strands/utils.py: urllib.request.urlopen)to a version that resolves this vulnerability.Patch bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be executed remotely, but the vector requires manipulation of the Value argument processed by the affected Multimodal Content code. The supplied data does not further specify the application workflow or authentication conditions needed to control that argument.
Which component should be prioritized for remediation?
Prioritize the Multimodal Content integration code at integrations/aws-strands/python/src/ag_ui_strands/utils.py, where urllib.request.urlopen is affected. The issue is reported in ag-ui version 0.3.0.
Is a fix available?
Yes. The identified patch is commit bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189.