CVE-2026-8769 - Vulnerability Details

- vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

Description

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-05-17

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

This vulnerability affects the createJsonResponseHandler and createJsonErrorResponseHandler functions in Vercel AI's provider-utils module, allowing attackers to supply crafted JSON responses that trigger excessive allocation and processing of resources. The resulting uncontrolled consumption can degrade system performance or cause a denial of service, as identified by CWE‑400 and CWE‑404.

Affected Systems

The issue exists in Vercel AI versions up to and including 3.0.97. All installations of Vercel AI, specifically the provider-utils component, are potentially affected.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. No EPSS score is available, so the current likelihood of exploitation cannot be quantified. The vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog. The description indicates the exploit can be initiated remotely, meaning attackers could trigger the resource consumption by sending crafted requests. No additional exploitation conditions are stated.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

vercel

affected

Version	Status	Constraints
`3.0.0`	affected	—
`3.0.1`	affected	—
`3.0.2`	affected	—
`3.0.3`	affected	—
`3.0.4`	affected	—
`3.0.5`	affected	—
`3.0.6`	affected	—
`3.0.7`	affected	—
`3.0.8`	affected	—
`3.0.9`	affected	—
`3.0.10`	affected	—
`3.0.11`	affected	—
`3.0.12`	affected	—
`3.0.13`	affected	—
`3.0.14`	affected	—
`3.0.15`	affected	—
`3.0.16`	affected	—
`3.0.17`	affected	—
`3.0.18`	affected	—
`3.0.19`	affected	—
`3.0.20`	affected	—
`3.0.21`	affected	—
`3.0.22`	affected	—
`3.0.23`	affected	—
`3.0.24`	affected	—
`3.0.25`	affected	—
`3.0.26`	affected	—
`3.0.27`	affected	—
`3.0.28`	affected	—
`3.0.29`	affected	—
`3.0.30`	affected	—
`3.0.31`	affected	—
`3.0.32`	affected	—
`3.0.33`	affected	—
`3.0.34`	affected	—
`3.0.35`	affected	—
`3.0.36`	affected	—
`3.0.37`	affected	—
`3.0.38`	affected	—
`3.0.39`	affected	—
`3.0.40`	affected	—
`3.0.41`	affected	—
`3.0.42`	affected	—
`3.0.43`	affected	—
`3.0.44`	affected	—
`3.0.45`	affected	—
`3.0.46`	affected	—
`3.0.47`	affected	—
`3.0.48`	affected	—
`3.0.49`	affected	—
`3.0.50`	affected	—
`3.0.51`	affected	—
`3.0.52`	affected	—
`3.0.53`	affected	—
`3.0.54`	affected	—
`3.0.55`	affected	—
`3.0.56`	affected	—
`3.0.57`	affected	—
`3.0.58`	affected	—
`3.0.59`	affected	—
`3.0.60`	affected	—
`3.0.61`	affected	—
`3.0.62`	affected	—
`3.0.63`	affected	—
`3.0.64`	affected	—
`3.0.65`	affected	—
`3.0.66`	affected	—
`3.0.67`	affected	—
`3.0.68`	affected	—
`3.0.69`	affected	—
`3.0.70`	affected	—
`3.0.71`	affected	—
`3.0.72`	affected	—
`3.0.73`	affected	—
`3.0.74`	affected	—
`3.0.75`	affected	—
`3.0.76`	affected	—
`3.0.77`	affected	—
`3.0.78`	affected	—
`3.0.79`	affected	—
`3.0.80`	affected	—
`3.0.81`	affected	—
`3.0.82`	affected	—
`3.0.83`	affected	—
`3.0.84`	affected	—
`3.0.85`	affected	—
`3.0.86`	affected	—
`3.0.87`	affected	—
`3.0.88`	affected	—
`3.0.89`	affected	—
`3.0.90`	affected	—
`3.0.91`	affected	—
`3.0.92`	affected	—
`3.0.93`	affected	—
`3.0.94`	affected	—
`3.0.95`	affected	—
`3.0.96`	affected	—
`3.0.97`	affected	—

Configuration 1 [-]

cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*

No data.

Vendor Product Confidence Versions

Vercel

100%

Version	Status	Scheme	Platform
`[3.0.0,3.0.97]`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade Vercel AI to a patched release (version 3.0.98 or later) that addresses the response-handler flaw.
If an upgrade is not immediately possible, implement request throttling or rate limiting on incoming JSON responses to limit potential resource consumption.
Validate or configure the JSON processing to enforce maximum size limits and reject excessively large or malformed responses.
Monitor system metrics and logs for abnormal resource usage that could indicate exploitation attempts.

Generated by OpenCVE AI on May 18, 2026 at 00:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Github GHSA	GHSA-866g-f22w-33x8	@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00017.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb
https://vuldb.com/submit/811406
https://vuldb.com/vuln/364394
https://vuldb.com/vuln/364394/cti

History

Mon, 18 May 2026 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 17 May 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title		vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
First Time appeared		Vercel Vercel ai
Weaknesses		CWE-400 CWE-404
CPEs		cpe:2.3:a:vercel:ai::::::::
Vendors & Products		Vercel Vercel ai
References		https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb https://vuldb.com/submit/811406 https://vuldb.com/vuln/364394 https://vuldb.com/vuln/364394/cti
Metrics		cvssV2_0 `{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}` cvssV3_0 `{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Vercel Ai

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-05-17T23:00:13.988Z

Updated: 2026-05-18T20:13:40.558Z

Reserved: 2026-05-17T09:28:09.002Z

Link: CVE-2026-8769

Vulnrichment

Updated: 2026-05-18T20:13:36.286Z

NVD

Status : Analyzed

Published: 2026-05-17T23:17:03.180

Modified: 2026-05-19T15:27:30.900

Link: CVE-2026-8769

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-05-18T00:30:13Z

Weaknesses

CWE-400
Uncontrolled Resource Consumption
CWE-404
Improper Resource Shutdown or Release

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object