Is CVE-2026-92184 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-92184 being exploited in the wild.

How severe is CVE-2026-92184?

Medium severity, with a CVSS score of 6.3, published 16 September 2026.

Is there a fix for CVE-2026-92184?

A patch was published on 2026-08-25: Patch commit bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-92184 attacked?

It is attacked over the network.

Am I affected by CVE-2026-92184?

Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-92184: ag-ui protocol ag-ui server-side request forgery in URL fetching

CVE-2026-92184 · Severity: medium · CVSS 6.3 · Published 2026-09-16

ag-ui is a framework for integrating AI agents into frontend applications. The library contains a server-side request forgery vulnerability in its URL content fetching component, which allows remote attackers to make arbitrary HTTP requests from the server. An attacker could use this to access internal resources, cloud metadata endpoints, or perform attacks against services only accessible from the server's network.

Technologies: Ag-Ui-Protocol Ag-Ui. Vendors: Ag-Ui-Protocol.

Quick answers

Is CVE-2026-92184 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-92184 being exploited in the wild.
How severe is CVE-2026-92184?: Medium severity, with a CVSS score of 6.3, published 16 September 2026.
Which products and versions are affected?: Ag-Ui-Protocol Ag-Ui 0.3.0.
Is there a fix for CVE-2026-92184?: A patch was published on 2026-08-25: Patch commit bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-92184 attacked?: It is attacked over the network.
Am I affected by CVE-2026-92184?: Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a server-side request forgery (SSRF) in the urllib.request.urlopen function call within the Multimodal Content component (integrations/aws-strands/python/src/ag_ui_strands/utils.py). The flaw allows manipulation of URL arguments passed to the function without proper validation before the fetch is executed. An unauthenticated remote attacker can send a crafted message containing a malicious URL, which the server will fetch server-side, potentially exposing internal resources or cloud metadata. The vulnerability was patched in commit bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189 with server-side URL validation and a UrlFetchPolicy restricting fetches to public HTTP/HTTPS only and blocking non-public address spaces.

Affected products

ag-ui-protocol ag-ui 0.3.0

Timeline

2026-09-16: disclosed
2026-08-25: patched: Patch commit bf0c34df34cbb4b1992bc37c9bfffe6dd54bb189

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.