CVE-2026-101098 | ag-ui-protocol ag-ui up to 2026-09-23 HTTP JdkAgentHttpHandler.java readAllBytes resource consumption (Issue 2441)

September 28, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption.

This vulnerability is uniquely identified as CVE-2026-101098. The attack can be launched remotely. No exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More