cvedb.io
CVE-2026-29791
MEDIUM · CVSS 4.9
EPSS exploitation probability: 0%
Published 2026-03-06T21:16:15.787 · Last modified 2026-06-17T10:29:53.650

Summary

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in version 0.12.0.

Affected products

lfprojects — agentgateway

Does this affect you?

Add your gear to cvedb and we'll alert you only when lfprojects ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.