CVE-2026-92361

תיאור (מקור, אנגלית)

A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fix this issue awaits acceptance.

מדדים

CVSS 3.1

4.3 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS 4.0

5.3 (MEDIUM) מקור הציון: CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE

CWE-400, CWE-404

קישורים

• https://github.com/ag-ui-protocol/ag-ui/
• https://github.com/ag-ui-protocol/ag-ui/issues/2438
• https://github.com/ag-ui-protocol/ag-ui/pull/2700
• https://vuldb.com/cve/CVE-2026-92361
• https://vuldb.com/submit/934952
• https://vuldb.com/vuln/405447
• https://vuldb.com/vuln/405447/cti