CVE-2026-92362

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request to fix this issue awaits acceptance.

  • Published Sep 16, 2026
  • CVSS 6.9 medium
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-92362 at the National Vulnerability Database