CVE-2026-92362

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

A remote attacker can cause resource exhaustion, potentially leading to denial of service (DoS) and application unavailability. This affects the stability of systems using this component.

Monitor for the fix and update ag-ui to a version containing the resolution as soon as possible. Until a fix is released, limit external exposure of the service and implement resource consumption limits.