CVE-2026-92360: ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation
Published Sep 16, 2026
·Updated
A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.
Affected Software
1 affected component
ag-ui-protocol ag-ui-protocol/ag-ui=1.0
Event History
Sep 16, 2026
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable and requires low privileges. No user interaction is required.
2
Which input is involved in the vulnerable behavior?
The issue is triggered through manipulation of the TEXT_MESSAGE_START argument processed by prepareRunAgentInput in agent/agent.ts.
3
Is a fix available?
A pull request to fix the issue exists, but it is awaiting acceptance. The provided data does not identify a released fixed version.