Detections
Analytics
SCA: security update for github.com/envoyproxy/ai-gateway (GHSA-953h-535j-jg2v)
high Tenable Cloud Security Plugin ID 476174
Description
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeableSolution
Update the github.com/envoyproxy/ai-gateway library and its related packages to version 1.2.0-rc1 or later.See Also
Plugin Details
Severity: High
ID: 476174
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/19/2026
Updated: 10/19/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/19/2026
Vulnerability Publication Date: 10/19/2026