CVE-2026-29791 in Agentgateway

Riassunto

di MITRE • 06/03/2026

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: GitHub M
• Prenotare: 04/03/2026
• Divulgazione: 06/03/2026
• Moderazione: accettato
• Voce: VDB-349561
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00144
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-29791
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-29791
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-29791/