CVE-2026-120235 | ag-ui-protocol ag-ui up to 0.0.58 SSE Parser sse.ts parseSSEStream resource consumption (Issue 2522)

October 31, 2026 Yanac

A vulnerability has been found in ag-ui-protocol ag-ui up to 0.0.58 and classified as problematic. Affected is the function parseSSEStream of the file sdks/typescript/packages/client/src/transform/sse.ts of the component SSE Parser. The manipulation leads to resource consumption.

This vulnerability is listed as CVE-2026-120235. The attack may be initiated remotely. In addition, an exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More