CVE-2026-92362

Summary

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

Affected Software

Weaknesses

• CWE-400: Resource Consumption
• CWE-404: Denial of Service

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://vuldb.com/vuln/405448
• https://vuldb.com/vuln/405448/cti
• https://vuldb.com/cve/CVE-2026-92362
• https://vuldb.com/submit/934956
• https://github.com/ag-ui-protocol/ag-ui/issues/2439
• https://github.com/ag-ui-protocol/ag-ui/pull/2500
• https://github.com/ag-ui-protocol/ag-ui/

• ←Previous
• Next→