Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion

TRUNG BÌNH 6.5CVE-2026-29791 · GHSA-v2x6-wwfw-r2rq · Công bố 06/03/2026 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2026-29791 là lỗ hổng mức TRUNG BÌNH (CVSS 6.5) ảnh hưởng github.com/agentgateway/agentgateway, agentgateway (lfprojects).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.17%, cao hơn 6.0% các lỗ hổng khác.
Cách xử lý: cập nhật lên 0.12.0 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
github.com/agentgateway/agentgateway Go	`< 0.12.0`	`0.12.0`
agentgateway lfprojects	`< 0.12.0`	`0.12.0`

Mô tả

Summary

When converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized.

Details

When using the MCP to OpenAPI feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing:

Injection of additional path or query parameters.
Injection of additional headers.

Impacted Versions

This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+.

This feature only impacts usage of the MCP to OpenAPI feature

Credits

Agentgateway extends its thanks to @spacewander for the report!

Mô tả của NVD

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.