CVE-2026-92359

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui version 0.3.0

Description A security flaw exists in the CORSMiddleware component within the create strands app() function. This issue allows for a permissive cross-domain policy with untrusted domains, which could be exploited remotely. The attack is characterized by high complexity and is considered difficult to execute.

Recommendations Upgrade to version AGUI.Abstractions@0.0.6.