# CVE-2026-101098: ag-ui HTTP Handler unbounded resource consumption in readAllBytes

Source: https://junglewise.ai/threats/cve-2026-101098-a-security-vulnerability-has-been-detected-in-ag-ui-protocol-ag  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-28. Updated: 2026-09-28  
License: CC BY 4.0 with a link back

CVE-2026-101098 · Severity: medium · CVSS 4.3 · Published 2026-09-28

The ag-ui protocol library contains a vulnerability in its Java HTTP handler that reads entire request bodies into memory without size limits. An attacker can send large POST requests to the agent endpoint to exhaust server memory and cause denial of service. This vulnerability affects the library up to version 2026-09-23 and requires network access to exploit.

Technologies: [Ag-Ui-Protocol Ag-Ui](https://junglewise.ai/threats/technologies/ag-ui). Vendors: [Ag-Ui-Protocol](https://junglewise.ai/threats/vendors/ag-ui-protocol).

## Quick answers

**Is CVE-2026-101098 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-101098 being exploited in the wild.

**How severe is CVE-2026-101098?** Medium severity, with a CVSS score of 4.3, published 28 September 2026.

**Which products and versions are affected?** Ag-Ui-Protocol Ag-Ui up to 2026-09-23.

**Is there a fix for CVE-2026-101098?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-101098 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-101098?** Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The JdkAgentHttpHandler.java component uses readAllBytes() to load the full HTTP request body into heap memory without enforcing a maximum size limit (CWE-400). An unauthenticated remote attacker can trigger resource exhaustion by sending repeated large POST requests to the agent endpoint, causing out-of-memory conditions. A fix is pending acceptance and mitigations include reverse-proxy body size limits.

## Affected products

- ag-ui-protocol ag-ui up to 2026-09-23

## Timeline

- 2026-09-28: disclosed
- other: pull request to fix pending acceptance

## References

- [https://github.com/ag-ui-protocol/ag-ui/](https://github.com/ag-ui-protocol/ag-ui/)
- [https://github.com/ag-ui-protocol/ag-ui/issues/2441](https://github.com/ag-ui-protocol/ag-ui/issues/2441)

## Related threats

- [ag-ui-protocol ag-ui resource exhaustion in interrupt expiry](https://junglewise.ai/threats/cve-2026-120237-a-flaw-has-been-found-in-ag-ui-protocol-ag-ui-up-to-0-0-58)
- [ag-ui Transport Decoder Handler improper input validation](https://junglewise.ai/threats/cve-2026-120236-a-vulnerability-was-detected-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui SSE parser resource exhaustion](https://junglewise.ai/threats/cve-2026-120235-a-security-vulnerability-has-been-detected-in-ag-ui-protocol-ag)
- [ag-ui HTTP Transport unbounded response buffering](https://junglewise.ai/threats/cve-2026-120234-a-weakness-has-been-identified-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui HttpAgent credential and request body forwarding via redirect](https://junglewise.ai/threats/cve-2026-120233-a-security-flaw-has-been-discovered-in-ag-ui-protocol-ag-ui-up)