{"data":{"id":"c42cd4c3-5de9-405c-8f30-db89174a3772","title":"CVE-2026-1721: Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback…","summary":"A reflected XSS flaw in the AI Playground's OAuth callback handler (`site/ai-playground/src/server.ts`) interpolates the `error_description` query parameter into an inline `<script>` tag without escaping. A victim who clicks a crafted link lets an attacker run arbitrary JavaScript in their session, exposing stored LLM chat history and allowing actions on any MCP servers connected to that session, public or authenticated.","solution":"Agents-sdk users should upgrade to agents@0.3.10. Developers using configureOAuthCallback with custom error handling should escape all user-controlled input before interpolation. The source also links PR https://github.com/cloudflare/agents/pull/841.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-1721","publishedAt":"2026-02-13T03:15:52.467Z","cveId":"CVE-2026-1721","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["agents@< 0.3.10 (fixed: 0.3.10)"],"affectedPackageNames":["agents"],"affectedPackageRefs":["npm:agents"],"affectedVendors":[],"affectedVendorsRaw":["AI Playground","Cloudflare agents-sdk","MCP Servers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AI Playground reflected XSS through OAuth callback error parameter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00417,"epssCheckedAt":"2026-11-04T18:09:12.971Z","kevDateAdded":null,"advisoryAliases":["GHSA-cvhv-6xm6-c3v4"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:51.338Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-04T21:28:20.303Z","daysToFix":-9,"fixCheckedAt":"2026-10-29T21:41:38.764Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"agents","fixedVersion":"0.3.10","matchedVersion":"0.3.10","fixReleasedAt":"2026-02-04T21:28:20.303Z","daysToFix":-9,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:38.615Z"}]}}