Dashboard / CVE-2026-120236

CVE-2026-120236

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-11-01 Modified: 2026-11-02 First seen: 2026-11-01 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The manipulation results in improper input validation. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 660182b973a44b8eda5484b14b88eb9cc251edc4. It is suggested to upgrade the affected component.

Weakness Classification (1)

Affected Software (116)

VendorProductVersion
ag-ui-protocol ag-ui 0.0.1
ag-ui-protocol ag-ui 0.0.2
ag-ui-protocol ag-ui 0.0.3
ag-ui-protocol ag-ui 0.0.4
ag-ui-protocol ag-ui 0.0.5
ag-ui-protocol ag-ui 0.0.6
ag-ui-protocol ag-ui 0.0.7
ag-ui-protocol ag-ui 0.0.8
ag-ui-protocol ag-ui 0.0.9
ag-ui-protocol ag-ui 0.0.10
ag-ui-protocol ag-ui 0.0.11
ag-ui-protocol ag-ui 0.0.12
ag-ui-protocol ag-ui 0.0.13
ag-ui-protocol ag-ui 0.0.14
ag-ui-protocol ag-ui 0.0.15
ag-ui-protocol ag-ui 0.0.16
ag-ui-protocol ag-ui 0.0.17
ag-ui-protocol ag-ui 0.0.18
ag-ui-protocol ag-ui 0.0.19
ag-ui-protocol ag-ui 0.0.20
ag-ui-protocol ag-ui 0.0.21
ag-ui-protocol ag-ui 0.0.22
ag-ui-protocol ag-ui 0.0.23
ag-ui-protocol ag-ui 0.0.24
ag-ui-protocol ag-ui 0.0.25
ag-ui-protocol ag-ui 0.0.26
ag-ui-protocol ag-ui 0.0.27
ag-ui-protocol ag-ui 0.0.28
ag-ui-protocol ag-ui 0.0.29
ag-ui-protocol ag-ui 0.0.30
Showing 30 of 116 entries

References & Advisories (9)

https://vuldb.com/submit/1015178
third-party-advisory
https://vuldb.com/vuln/429595/cti
signature permissions-required

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.27%
Raw Score 0.002670
Percentile 18.9%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00267
2026-11-04
0.00267
2026-11-03
0.00267
2026-11-02
0.00267

Intelligence Sources

mitre ref →
nvd ref →

External Links