Performance Degradation in IBM MQ Agent Due to Excessive Request Processing

CVE-2026-19645

What is CVE-2026-19645?

An authenticated user can exploit a vulnerability in IBM MQ Agent by sending arbitrarily large or computationally expensive requests. This leads to extended processing times for agent workers, often exceeding ten minutes. When multiple such requests are sent simultaneously, the agent worker pool becomes exhausted, significantly degrading performance or causing complete unavailability of the AI Agent feature for other users.

References