Resource Consumption Vulnerability in ag-ui-protocol ag-ui 1.0
CVE-2026-92361

5.3MEDIUM

Key Information:

Vendor

Ag-ui-protocol

Status
Ag-ui
Vendor
CVE Published:
16 September 2026

What is CVE-2026-92361?

A vulnerability exists in ag-ui-protocol's ag-ui version 1.0 that impacts the SSE Client, specifically within an unknown function of the client.go file. This flaw allows for remote manipulation, resulting in excessive resource consumption which may affect application performance. The issue is under review for a fix, and users are encouraged to monitor updates to ensure their systems remain secure.

Affected Version(s)

ag-ui 1.0

References

https://vuldb.com/vuln/405447
vdb-entry
https://vuldb.com/vuln/405447/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-92361
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

meraklbz (VulDB User)
VulDB CNA Team
.