CVE-2026-101098

ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption

View on CVE.org
Published Sep 28, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Analysis

AI-generated

Technical impact

The ag‑ui component receives HTTP requests through JdkAgentHttpHandler.java, which contains a readAllBytes method that can read arbitrary amounts of input without bounds. An attacker can send a crafted request that forces this method to consume large amounts of memory, potentially starving the process and causing it to become unresponsive or crash—a classic denial‑of‑service attack. This weakness corresponds to CWE‑400 (Resource Consumption) and CWE‑404 (Missing Resource Management).

Affected Systems

ag‑ui by ag‑ui‑protocol, affecting all releases up through 2026‑09‑23.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity; the EPSS score is currently unavailable and the vulnerability is not listed in the CISA KEV catalog. The attack can be launched remotely via the network, requiring only the ability to send HTTP requests to the vulnerable component. No known exploitation reports are present, but the lack of a hard limit on input size makes the vulnerability exploitable in theory.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Deploy the latest version of ag‑ui once the pending pull request is merged and the patch is released.
  • If an immediate fix is required, constrain the size of HTTP request bodies or modify readAllBytes to read data in bounded chunks to prevent memory exhaustion.
  • Implement network‑level rate limiting or an API gateway that caps the throughput of connections to ag‑ui to reduce the impact of a malicious actor.

Generated by OpenCVE AI on September 28, 2026 at 18:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.
Title ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption
First Time appeared Ag-ui-protocol
Ag-ui-protocol ag-ui
Weaknesses CWE-400
CWE-404
CPEs cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:*
Vendors & Products Ag-ui-protocol
Ag-ui-protocol ag-ui
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:ND/RC:C'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:C'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X'}
Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-404

    Improper Resource Shutdown or Release

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Sep 28, 2026, 5:48 PM
Reserved
Sep 28, 2026, 2:53 AM

View source JSON

Updated
Sep 28, 2026, 5:48 PM

JSON

Status
Deferred
Published
Sep 28, 2026, 5:17 PM
Modified
Sep 28, 2026, 9:03 PM

View source JSON

No data.

Updated
Sep 28, 2026, 7:47 PM

JSON