agentgateway vulnerabilities

Products

• github.com/agentgateway/agentgateway 1

Latest agentgateway CVEs

Newest publication first

1. CVE-2026-29791 Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion

   Published 2026-03-06

   Medium·CVSS 6.5 EPSS 0.17%

   Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.