vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-92359

ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy

LOW
3.1
CVSS Score
Published: September 16, 2026 at 12:00 PM UTC
Updated: September 23, 2026 at 03:09 PM UTC
1 product affected across 1 vendorAG-UI

Using ag-ui by ag-ui-protocol?

Get instant alerts when new vulnerabilities affect ag-ui - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
LOW3.1
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version [email protected] is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

AG-UI· UI Protocol
60%
0.3.0
Vendor states this is fixed in [email protected] (unaffected)

References (9)

VDB EntryTechnical Description
Source: cverecord
https://vuldb.com/vuln/405445
SignaturePermissions Required
Source: cverecord
https://vuldb.com/vuln/405445/cti
Third Party Advisory
Source: cverecord
https://vuldb.com/cve/CVE-2026-92359
Third Party Advisory
Source: cverecord
https://vuldb.com/submit/934120
Issue Tracking
Source: cverecord
https://github.com/ag-ui-protocol/ag-ui/issues/2433
Issue TrackingPatch
Source: cverecord
https://github.com/ag-ui-protocol/ag-ui/pull/2492
Patch
Source: cverecord
https://github.com/ag-ui-protocol/ag-ui/commit/9b143b9668fa52c2054ede9d34a45ac4b4401089
Patch
Source: cverecord
https://github.com/ag-ui-protocol/ag-ui/releases/tag/AGUI.Abstractions%400.0.6

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

3.1LOWVulDB
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-942CWE-346

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card