CVE Feed

    Dashboard / CVE / CVE-2026-92359

    CVE-2026-92359

    A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version [email protected] is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component.

    Published:Sep 16, 2026
    Last Modified:Sep 16, 2026
    EPS:Sep 16, 2026
    EPSS Score:
    CVSS Score:3.1

    Affected Products

    Vendor
    Ag-ui-protocol
    Product
    Ag-ui

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-120237 (CVSS 2.1) — A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterrupt…
    CVE-2026-120236 (CVSS 2.1) — A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknow…
    CVE-2026-120235 (CVSS 2.1) — A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function pars…
    CVE-2026-120234 (CVSS 2.1) — A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the c…
    CVE-2026-120233 (CVSS 5.5) — A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of …
    CVE-2026-101101 (CVSS 5.3) — A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.…
    CVE-2026-101100 (CVSS 5.3) — A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function Filter…
    CVE-2026-101099 (CVSS 5.3) — A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the fil…
    CVE-2026-101098 (CVSS 5.3) — A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is…
    CVE-2026-92363 (CVSS 5.3) — A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sse_…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High