CVE-2026-120234 PUBLISHED

ag-ui-protocol ag-ui HTTP Transport e.text resource consumption

Assigner: VulDB
Reserved: 31.10.2026 Published: 01.11.2026 Updated: 01.11.2026

A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component HTTP Transport. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor ag-ui-protocol
Product ag-ui
Versions
  • Version 0.0.1 is affected
  • Version 0.0.2 is affected
  • Version 0.0.3 is affected
  • Version 0.0.4 is affected
  • Version 0.0.5 is affected
  • Version 0.0.6 is affected
  • Version 0.0.7 is affected
  • Version 0.0.8 is affected
  • Version 0.0.9 is affected
  • Version 0.0.10 is affected
  • Version 0.0.11 is affected
  • Version 0.0.12 is affected
  • Version 0.0.13 is affected
  • Version 0.0.14 is affected
  • Version 0.0.15 is affected
  • Version 0.0.16 is affected
  • Version 0.0.17 is affected
  • Version 0.0.18 is affected
  • Version 0.0.19 is affected
  • Version 0.0.20 is affected
  • Version 0.0.21 is affected
  • Version 0.0.22 is affected
  • Version 0.0.23 is affected
  • Version 0.0.24 is affected
  • Version 0.0.25 is affected
  • Version 0.0.26 is affected
  • Version 0.0.27 is affected
  • Version 0.0.28 is affected
  • Version 0.0.29 is affected
  • Version 0.0.30 is affected
  • Version 0.0.31 is affected
  • Version 0.0.32 is affected
  • Version 0.0.33 is affected
  • Version 0.0.34 is affected
  • Version 0.0.35 is affected
  • Version 0.0.36 is affected
  • Version 0.0.37 is affected
  • Version 0.0.38 is affected
  • Version 0.0.39 is affected
  • Version 0.0.40 is affected
  • Version 0.0.41 is affected
  • Version 0.0.42 is affected
  • Version 0.0.43 is affected
  • Version 0.0.44 is affected
  • Version 0.0.45 is affected
  • Version 0.0.46 is affected
  • Version 0.0.47 is affected
  • Version 0.0.48 is affected
  • Version 0.0.49 is affected
  • Version 0.0.50 is affected
  • Version 0.0.51 is affected
  • Version 0.0.52 is affected
  • Version 0.0.53 is affected
  • Version 0.0.54 is affected
  • Version 0.0.55 is affected
  • Version 0.0.56 is affected
  • Version 0.0.57 is affected
  • Version 0.0.58 is affected

Credits

  • ez-lbz (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Resource Consumption CWE
  • Denial of Service CWE