ghsa:GHSA-953H-535J-JG2V: github.com/envoyproxy/ai-gateway >= 0.4.0-rc1, < 1.2.0-rc1

agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable. Affected range: >= 0.4.0-rc1, < 1.2.0-rc1. Fixed version: 1.2.0-rc1.

Affected technology

github.com/envoyproxy/ai-gateway · >= 0.4.0-rc1, < 1.2.0-rc1
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 05:33 UTC

Product: github.com/envoyproxy/ai-gateway
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-953h-535j-jg2v.html