Skip to content
OpenAdvisories

Package · Go

github.com/envoyproxy/ai-gateway

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-953h-535j-jg2v

    agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable

    ## Summary The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifically as an anti-hijacking discriminator — matching the Model Context Protocol specification's documented session-hijacking guidance (https:…

    github.com/envoyproxy/ai-gateway Go
  • Medium —
    GHSA-4gph-2hhr-5mwg

    Envoy AI Proxy - MCP Message Smuggling Vulnerability

    Envoy AI Gateway was found to be affected by a protocol parser differential vulnerability due to improper implementation of the JSON-RPC 2.0 specification. Such differential causes a MCP message alteration, potentially causing a bypass of security controls in…

    github.com/envoyproxy/ai-gateway Go