CVE-2026-92362: falha de média gravidade em ag-ui-protocol ag-ui
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
ag-ui-protocol · ag-uiCVEs relacionadas — ag-ui-protocol ag-ui
No mesmo produto, das mais perigosas para as menos.
CVE-2026-92363MEDIUMag-ui-protocol ag-ui JSON sse_parser.cpp resource consumptionEPSS 0.5%CVE-2026-92361MEDIUMag-ui-protocol ag-ui SSE Client client.go resource consumptionEPSS 0.5%CVE-2026-120233MEDIUMag-ui-protocol ag-ui HttpAgent http.ts information disclosureEPSS 0.4%CVE-2026-120237MEDIUMag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumptionEPSS 0.4%CVE-2026-101099MEDIUMag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional conditionEPSS 0.4%CVE-2026-92184MEDIUMag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgeryEPSS 0.4%