---
id: CVE-2026-120236
title: ag-ui-protocol ag-ui Transport Decoder input validation
summary: >-
  A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by
  this vulnerability is an unknown functionality of the component Transport
  Decoder Handler. The manipulation results in improper input validation. The
  attack m…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-20
vendor: ag-ui-protocol
product: ag-ui
affected:
  - ag-ui 0.0.1
  - ag-ui 0.0.2
  - ag-ui 0.0.3
  - ag-ui 0.0.4
  - ag-ui 0.0.5
  - ag-ui 0.0.6
  - ag-ui 0.0.7
  - ag-ui 0.0.8
  - ag-ui 0.0.9
  - ag-ui 0.0.10
  - ag-ui 0.0.11
  - ag-ui 0.0.12
  - ag-ui 0.0.13
  - ag-ui 0.0.14
  - ag-ui 0.0.15
  - ag-ui 0.0.16
  - ag-ui 0.0.17
  - ag-ui 0.0.18
  - ag-ui 0.0.19
  - ag-ui 0.0.20
  - ag-ui 0.0.21
  - ag-ui 0.0.22
  - ag-ui 0.0.23
  - ag-ui 0.0.24
  - ag-ui 0.0.25
  - ag-ui 0.0.26
  - ag-ui 0.0.27
  - ag-ui 0.0.28
  - ag-ui 0.0.29
  - ag-ui 0.0.30
  - ag-ui 0.0.31
  - ag-ui 0.0.32
  - ag-ui 0.0.33
  - ag-ui 0.0.34
  - ag-ui 0.0.35
  - ag-ui 0.0.36
  - ag-ui 0.0.37
  - ag-ui 0.0.38
  - ag-ui 0.0.39
  - ag-ui 0.0.40
  - ag-ui 0.0.41
  - ag-ui 0.0.42
  - ag-ui 0.0.43
  - ag-ui 0.0.44
  - ag-ui 0.0.45
  - ag-ui 0.0.46
  - ag-ui 0.0.47
  - ag-ui 0.0.48
  - ag-ui 0.0.49
  - ag-ui 0.0.50
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-02T14:30:58.450312Z'
exploitAvailable: true
published: '2026-11-01'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T14:31:08.462Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120236'
references:
  - url: 'https://vuldb.com/vuln/429595'
    label: VDB-429595 | ag-ui-protocol ag-ui Transport Decoder input validation
  - url: 'https://vuldb.com/vuln/429595/cti'
    label: 'VDB-429595 | CTI Indicators (IOB, IOC)'
  - url: 'https://vuldb.com/cve/CVE-2026-120236'
    label: CVE-2026-120236 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1015178'
    label: 'Submit #1015178 | ag-ui-protocol ag-ui <=0.0.58 CWE-20'
  - url: 'https://github.com/ag-ui-protocol/ag-ui/issues/2524'
  - url: 'https://github.com/ag-ui-protocol/ag-ui/pull/2774'
  - url: >-
      https://github.com/ag-ui-protocol/ag-ui/commit/660182b973a44b8eda5484b14b88eb9cc251edc4
  - url: 'https://github.com/ag-ui-protocol/ag-ui/releases/tag/release/2026-10-30'
  - url: 'https://github.com/ag-ui-protocol/ag-ui/'
tags:
  - cve.org
  - exploit-available
epss: 0.00267
epssPercentile: 0.18902
ingestedAt: '2026-11-05T19:30:42.663Z'
---

## Overview

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 660182b973a44b8eda5484b14b88eb9cc251edc4. It is suggested to upgrade the affected component.

## Affected

- `ag-ui 0.0.1`
- `ag-ui 0.0.2`
- `ag-ui 0.0.3`
- `ag-ui 0.0.4`
- `ag-ui 0.0.5`
- `ag-ui 0.0.6`
- `ag-ui 0.0.7`
- `ag-ui 0.0.8`
- `ag-ui 0.0.9`
- `ag-ui 0.0.10`
- `ag-ui 0.0.11`
- `ag-ui 0.0.12`
- `ag-ui 0.0.13`
- `ag-ui 0.0.14`
- `ag-ui 0.0.15`
- `ag-ui 0.0.16`
- `ag-ui 0.0.17`
- `ag-ui 0.0.18`
- `ag-ui 0.0.19`
- `ag-ui 0.0.20`
- `ag-ui 0.0.21`
- `ag-ui 0.0.22`
- `ag-ui 0.0.23`
- `ag-ui 0.0.24`
- `ag-ui 0.0.25`
- `ag-ui 0.0.26`
- `ag-ui 0.0.27`
- `ag-ui 0.0.28`
- `ag-ui 0.0.29`
- `ag-ui 0.0.30`
- `ag-ui 0.0.31`
- `ag-ui 0.0.32`
- `ag-ui 0.0.33`
- `ag-ui 0.0.34`
- `ag-ui 0.0.35`
- `ag-ui 0.0.36`
- `ag-ui 0.0.37`
- `ag-ui 0.0.38`
- `ag-ui 0.0.39`
- `ag-ui 0.0.40`
- `ag-ui 0.0.41`
- `ag-ui 0.0.42`
- `ag-ui 0.0.43`
- `ag-ui 0.0.44`
- `ag-ui 0.0.45`
- `ag-ui 0.0.46`
- `ag-ui 0.0.47`
- `ag-ui 0.0.48`
- `ag-ui 0.0.49`
- `ag-ui 0.0.50`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.