CVE-2026-120237 | ag-ui-protocol ag-ui up to 0.0.58 Interrupt expiry index.ts isInterruptExpired resource consumption (Issue 2525)

October 31, 2026 Yanac

A vulnerability was found in ag-ui-protocol ag-ui up to 0.0.58. It has been classified as problematic. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/index.ts of the component Interrupt expiry. This manipulation causes resource consumption.

This vulnerability is registered as CVE-2026-120237. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More