A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forgery.
The attack can be executed remotely. The patch is identified as bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189. It is advisable to implement a patch to correct this issue.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 8
https://github.com/ag-ui-protocol/ag-ui/
cna@vuldb.com
https://github.com/ag-ui-protocol/ag-ui/commit/bf0c34df34cbb4b1992bc37c9bfffe6d…
cna@vuldb.com
https://github.com/ag-ui-protocol/ag-ui/issues/2432
cna@vuldb.com
https://github.com/ag-ui-protocol/ag-ui/pull/2491
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-92184
cna@vuldb.com
https://vuldb.com/submit/934100
cna@vuldb.com
https://vuldb.com/vuln/404437
cna@vuldb.com
https://vuldb.com/vuln/404437/cti
cna@vuldb.com