What happened
A security flaw in ag-ui-protocol ag-ui up to 0.0.58 affects an unknown function in sdks/typescript/packages/client/src/agent/http.ts of the HttpAgent component. A remote manipulation of the agent HTTP client results in information disclosure (CWE-200/CWE-284). An exploit has been released to the public, the CVSS 4.0 assessment sets exploit maturity to PROOF_OF_CONCEPT, and the fixing pull request is still awaiting acceptance. Verified against the NVD REST API record published 2026-11-01.
Why it matters
The HttpAgent is the agent-to-agent HTTP client in this agent protocol SDK. An information-disclosure vector in the agent's own HTTP layer can leak request/response data or session material another agent should not see. Blast radius is narrow — a niche agent protocol package with only a low-information-disclosure impact — but it is a catalogued, PoC-bearing AI-agent vulnerability worth tracking.
Attack vector
A remote attacker manipulates the agent's HttpAgent HTTP handling; no authentication or user interaction is required beyond network reach, leading to disclosure of information processed through the agent HTTP client. Public PoC exists.
Affected systems
ag-ui-protocol ag-ui up to 0.0.58 (HttpAgent component, sdks/typescript/packages/client/src/agent/http.ts)
Mitigation
No accepted fix as of the window; monitor the ag-ui repository for the pending pull request and upgrade when merged, and limit exposure of the agent HTTP client to trusted peers until patched.