CVE-2026-29791

Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion

CVSS 4.9 MEDIUMEPSS 0.1%CWE-20

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.9EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

06 Mar 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Affected products

agentgateway · agentgateway

References

https://github.com/agentgateway/agentgateway/security/advisories/GHSA-v2x6-wwfw-r2rq