{"data":{"id":"03862a73-8e60-46df-8595-0d28316563c3","title":"GHSA-w5cr-2qhr-jqc5: Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site","summary":"Cloudflare Agents' AI Playground OAuth callback handler in site/ai-playground/src/server.ts inserted the error_description query parameter into an inline script tag without escaping. A crafted link lets an attacker run JavaScript in a victim's session, exposing chat history, LLM interactions and connected MCP servers, and enabling actions on the victim's behalf.","solution":"Agents-sdk users should upgrade to agents@0.3.10 (fix in PR https://github.com/cloudflare/agents/pull/841). Developers using configureOAuthCallback with custom error handling should escape all user-controlled input before interpolation.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-w5cr-2qhr-jqc5","publishedAt":"2026-02-13T21:04:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["agents@< 0.3.10 (fixed: 0.3.10)"],"affectedPackageNames":["agents"],"affectedPackageRefs":["npm:agents"],"affectedVendors":[],"affectedVendorsRaw":["Cloudflare Agents","AI Playground","MCP Servers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-w5cr-2qhr-jqc5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-04T21:28:20.303Z","daysToFix":-9,"fixCheckedAt":"2026-10-29T21:41:03.569Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"agents","fixedVersion":"0.3.10","matchedVersion":"0.3.10","fixReleasedAt":"2026-02-04T21:28:20.303Z","daysToFix":-9,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:03.407Z"}]}}