GHSA-v2x6-wwfw-r2rqMediumCVSS 4.9

Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion

Published
March 5, 2026
Last Modified
March 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-29791 →

📋 Description

Summary

When converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized.

Details

When using the MCP to OpenAPI feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing:

  • Injection of additional path or query parameters.
  • Injection of additional headers.

Impacted Versions

This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+.

This feature only impacts usage of the MCP to OpenAPI feature

Credits

Agentgateway extends its thanks to @spacewander for the report!

🎯 Affected products1

  • go/github.com/agentgateway/agentgateway:< 0.12.0

🔗 References (4)