ag-ui vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AG

Product

ag-ui

by ag-ui-protocol · last CVE Sep 28, 2026

10

CVEs

0

On KEV

7.3

Max CVSS

0

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 1Medium 8Low 1

Severity

All severities10 Critical0 High1 Medium8 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ag-ui to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-92360	6.3	0%	Sep 16	ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation Affected: 1.0
CVE-2026-92184	6.3	0%	Sep 15	ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery Affected: 0.3.0
CVE-2026-101100	5.4	0%	Sep 28	ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup Affected: 2026-09-07
CVE-2026-101101	4.3	0%	Sep 28	ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception Affected: 2026-09-07
CVE-2026-101099	4.3	0%	Sep 28	ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition Affected: 2026-09-23
CVE-2026-101098	4.3	0%	Sep 28	ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption Affected: 2026-09-23
CVE-2026-92363	4.3	1%	Sep 16	ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption Affected: 1.0
CVE-2026-92361	4.3	1%	Sep 16	ag-ui-protocol ag-ui SSE Client client.go resource consumption Affected: 1.0