CVE-2026-101098

EUVD-2026-88366
A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/ag-ui-protocol/ag-ui/
https://github.com/ag-ui-protocol/ag-ui/issues/2441
https://github.com/ag-ui-protocol/ag-ui/pull/2671
https://vuldb.com/cve/CVE-2026-101098
https://vuldb.com/submit/934960
https://vuldb.com/vuln/410973
https://vuldb.com/vuln/410973/cti