Is CVE-2026-101098 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-101098 being exploited in the wild.

How severe is CVE-2026-101098?

Medium severity, with a CVSS score of 4.3, published 28 September 2026.

Which products and versions are affected?

Ag-Ui-Protocol Ag-Ui up to 2026-09-23.

Is there a fix for CVE-2026-101098?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-101098 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-101098?

Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-101098: ag-ui HTTP Handler unbounded resource consumption in readAllBytes

CVE-2026-101098 · Severity: medium · CVSS 4.3 · Published 2026-09-28

The ag-ui protocol library contains a vulnerability in its Java HTTP handler that reads entire request bodies into memory without size limits. An attacker can send large POST requests to the agent endpoint to exhaust server memory and cause denial of service. This vulnerability affects the library up to version 2026-09-23 and requires network access to exploit.

Technologies: Ag-Ui-Protocol Ag-Ui. Vendors: Ag-Ui-Protocol.

Quick answers

Is CVE-2026-101098 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-101098 being exploited in the wild.
How severe is CVE-2026-101098?: Medium severity, with a CVSS score of 4.3, published 28 September 2026.
Which products and versions are affected?: Ag-Ui-Protocol Ag-Ui up to 2026-09-23.
Is there a fix for CVE-2026-101098?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-101098 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-101098?: Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The JdkAgentHttpHandler.java component uses readAllBytes() to load the full HTTP request body into heap memory without enforcing a maximum size limit (CWE-400). An unauthenticated remote attacker can trigger resource exhaustion by sending repeated large POST requests to the agent endpoint, causing out-of-memory conditions. A fix is pending acceptance and mitigations include reverse-proxy body size limits.

Affected products

ag-ui-protocol ag-ui up to 2026-09-23

Timeline

2026-09-28: disclosed
other: pull request to fix pending acceptance

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.