GHSA-v2x6-wwfw-r2rq
Agentgateway is missing parameter sanitization in MCP to OpenAPI conversion
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/agentgateway/agentgateway | < 0.12.0 | 0.12.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Summary
When converting MCP `tools/call` request to OpenAPI request, input path, query, and header values are not sanitized.
### Details
When using the [MCP to OpenAPI](https://agentgateway.dev/docs/standalone/latest/mcp/connect/openapi/) feature, the proxy lacks proper sanitization of input parameters in the MCP call, allowing:
* Injection of additional path or query parameters.
* Injection of additional headers.
### Impacted Versions
This vulnerability is fixed in Agentgateway v0.12.0+. Users on older versions are recommended to upgrade to v0.12.0+.
This feature only impacts usage of the [MCP to OpenAPI](https://agentgateway.dev/docs/standalone/latest/mcp/connect/openapi/) feature
### Credits
Agentgateway extends its thanks to @spacewander for the report!
References
External links from the advisory. They lead to third-party sites.