Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-28T17:30:15 @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CWE-459

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. The attack may be launched remotely. Upgrading to version 2026-09-08 is able to resolve this issue. This patch is called c346119fe870b70f5c19738ee5119f3e1456e59d. It is suggested to upgrade the affected component.

A flaw was found in ag-ui's `@ag-ui/client` npm package. When processing manipulated tool call inputs in `FilterToolCallsMiddleware` (`filter-tool-calls.ts`), the middleware fails to perform complete resource and state cleanup. A remote authenticated attacker can exploit this vulnerability by submitting crafted tool call payloads, leading to residual state corruption or resource leaks that degrade application integrity and availability.

A flaw was found in ag-ui within the client middleware component (`filter-tool-calls.ts`). In `FilterToolCallsMiddleware`, processing manipulated tool call inputs leads to incomplete cleanup of internal resources or state. A remote authenticated attacker can exploit this issue to alter application state tracking or cause resource leaks, resulting in low integrity and availability degradation. Container isolation and standard process boundaries contain the impact within the application runtime. Sanitize tool call payload parameters at the API gateway layer before passing requests to the client middleware. Alternatively, restrict privileges for authenticated users allowed to execute tool call filtering logic. Red Hat Hardened Images Not affected jaeger https://www.cve.org/CVERecord?id=CVE-2026-101100 https://nvd.nist.gov/vuln/detail/CVE-2026-101100 https://github.com/ag-ui-protocol/ag-ui/ https://github.com/ag-ui-protocol/ag-ui/commit/c346119fe870b70f5c19738ee5119f3e1456e59d https://github.com/ag-ui-protocol/ag-ui/issues/2443 https://github.com/ag-ui-protocol/ag-ui/pull/2494 https://github.com/ag-ui-protocol/ag-ui/releases/tag/release/2026-09-08 https://vuldb.com/cve/CVE-2026-101100 https://vuldb.com/submit/934980 https://vuldb.com/vuln/410975 https://vuldb.com/vuln/410975/cti