CVE-2026-120233 in ag-ui

Prediction

by VulDB Data Team • 10/31/2026

A security flaw has been discovered in <a href="/product/ag-ui-protocol:ag-ui">ag-ui-protocol ag-ui up to 0.0.58</a>. This affects an unknown function of the file <em>sdks/typescript/packages/client/src/agent/http.ts</em> of the component <em>HttpAgent</em>. Performing a manipulation results in information disclosure. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-429592
• CPE: VulDB
• CWE: CWE-200 (confirmed)
• Exploit: Download
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-120233
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-120233
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-120233/