Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion

보통 6.5CVE-2026-29791 · GHSA-v2x6-wwfw-r2rq · Published 06/03/2026 · updated 17/06/2026

요약

CVE-2026-29791은(는) github.com/agentgateway/agentgateway, agentgateway (lfprojects)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.17%, 전체 취약점의 6.0%보다 높음.
조치: 0.12.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
github.com/agentgateway/agentgateway Go	`< 0.12.0`	`0.12.0`
agentgateway lfprojects	`< 0.12.0`	`0.12.0`

Description

Summary

When converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized.

Details

When using the MCP to OpenAPI feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing:

Injection of additional path or query parameters.
Injection of additional headers.

Impacted Versions

This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+.

This feature only impacts usage of the MCP to OpenAPI feature

Credits

Agentgateway extends its thanks to @spacewander for the report!

NVD description

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

References

agentgateway/agentgateway security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-29791 · ADVISORY
agentgateway/agentgateway commit 9a52875 · WEB
agentgateway/agentgateway · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/agentgateway/agentgateway

< 0.12.0

0.12.0

agentgateway

lfprojects

< 0.12.0

0.12.0

Description

Summary

When converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized.

Details

When using the MCP to OpenAPI feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing:

Injection of additional path or query parameters.
Injection of additional headers.

Impacted Versions

This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+.

This feature only impacts usage of the MCP to OpenAPI feature

Credits

Agentgateway extends its thanks to @spacewander for the report!

NVD description