Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92362

ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption

CVSS 4.0 6.9 MEDIUMCVSS 3.1 7.3 HIGHCVSS 3.0 7.3 HIGHCVSS 2.0 7.5 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92362

Published

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92362

Published

ag-ui

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "ag-ui-protocol",
                    "product": "ag-ui",
                    "versions": [
                        {
                            "version": "1.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "SSE Frame Parser"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON