Description
A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an unknown function of the file sdks/community/go/pkg/client/sse/client.go of the component SSE Client. Such manipulation leads to resource consumption. The attack can be executed remotely. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ag-ui-protocol | ag-ui | 1.0 | — |
References
- VDB-405447 | ag-ui-protocol ag-ui SSE Client client.go resource consumption vdb-entry
- VDB-405447 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-92361 | CVE Analysis and Report third-party-advisory
- Submit #934952 | ag-ui-protocol ag-ui v1.0 CWE-400 third-party-advisory
- https://github.com/ag-ui-protocol/ag-ui/issues/2438 issue-tracking
- https://github.com/ag-ui-protocol/ag-ui/pull/2700 issue-tracking patch
- https://github.com/ag-ui-protocol/ag-ui/ product