GitHub Advisoryadvisory · Go

GHSA-v2x6-wwfw-r2rq Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion

MEDIUM Published 2026-03-05 Modified 2026-03-06 Official page ↗
Aliases
CVE-2026-29791
Ecosystem
Go
Packages
github.com/agentgateway/agentgateway
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Weaknesses
CWE-20
Reviewed
2026-03-05

Affected packages

• Go github.com/agentgateway/agentgateway: < 0.12.0 → fixed in 0.12.0

Description

Summary When converting MCP `tools/call` request to OpenAPI request, input path, query, and header values are not sanitized. Details When using the MCP to OpenAPI feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing: • Injection of additional path or query parameters. • Injection of additional headers. Impacted Versions This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+. This feature only impacts usage of the MCP to OpenAPI feature Credits Agentgateway extends its thanks to @spacewander for the report!

Related

Alias · CVE (1)

  • CVE-2026-29791 Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References