MediumGHSA-g3x3-7q3h-gmhj1 Oct · 22 days ago
Source ↗

AI SDK ACP Harness Host Tool Relay Authorization Bypass.

Does it affect you?

Not read yet

Conditions are read within the hour after an advisory comes in.

Impact The @ai-sdk/harness-acp host-tool relay did not verify that relay requests matched model-generated tool calls. Untrusted sandbox code that obtained the relay credential could invoke registered host tools during an active prompt turn. Impact depends on the tools exposed by the application. Tools requiring explicit user approval remain protected. Patches Upgrade to @ai-sdk/harness-acp 1.0.77 or later. References - https://github.com/vercel/ai/pull/21826

SourcesGitHub advisory

Timeline

1 Oct
22 daysfrom publication to Patchwire
  1. Published by GitHub advisory1 Oct
  2. Seen by Patchwire23 Oct
  3. Fix released1 Oct
ai-sdk1.0.77

Versions of ai-sdk

1.x
safe 1.0.77
AffectedSafe

Packages

ai-sdk

Stacks

Not part of a tracked stack.