Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-120236: ag-ui Transport Decoder can be tricked remotely

CVE-2026-120236 · published 3 days ago

Summary

The Transport Decoder feature in ag-ui version up to 0.0.58 does not check incoming data properly, so an attacker on the network could send crafted messages that cause it to behave incorrectly. This can be exploited from outside the organization and a public exploit already exists. Update ag-ui to the latest version that includes the provided fix to stop the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ag-ui-protocol	ag-ui	0.0.1

Original advisory text

ag-ui-protocol ag-ui Transport Decoder input validation

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 660182b973a44b8eda5484b14b88eb9cc251edc4. It is suggested to upgrade the affected component.

References

https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/120xxx/CVE-2026-1202... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-120236 Vendor Advisory
https://github.com/ag-ui-protocol/ag-ui/ URL
https://vuldb.com/cve/CVE-2026-120236 Vendor Advisory
https://vuldb.com/submit/1015178 Vendor Advisory
https://vuldb.com/vuln/429595 Vendor Advisory
https://github.com/ag-ui-protocol/ag-ui/issues/2524 Third Party Advisory
https://vuldb.com/vuln/429595/cti Third Party Advisory
https://github.com/ag-ui-protocol/ag-ui/commit/660182b973a44b8eda5484b14b88eb9cc... Patch
https://github.com/ag-ui-protocol/ag-ui/pull/2774 Patch
https://github.com/ag-ui-protocol/ag-ui/releases/tag/release/2026-10-30 Patch

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.9 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published1 Nov 2026

Updated4 Nov 2026

First seen1 Nov 2026

Sources

CVE-2026-120236 · NVD

CVE-2026-120236 · MITRE

CVE-2026-120236 · OSV

Track software like this

Free during beta