CVE-2026-85100 | 2FastLabs agent-squad up to 1.1.4 Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption (Issue 661)

September 3, 2026 Yanac

A vulnerability labeled as problematic has been found in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption.

This vulnerability is known as CVE-2026-85100. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More