# CVE-2026-92361: AG-UI Protocol ag-ui resource consumption in SSE Client

Source: https://junglewise.ai/threats/cve-2026-92361-ag-ui-protocol-ag-ui-resource-consumption-in-sse-client  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-16. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-92361 · Severity: medium · CVSS 4.3 · Published 2026-09-16

AG-UI is a framework for integrating AI agents into frontend applications. The Go community SDK's SSE (Server-Sent Events) client component fails to limit memory consumption when processing event streams, allowing a malicious agent endpoint to exhaust client memory and cause service denial without authentication or user interaction.

Technologies: [Ag-Ui-Protocol Ag-Ui](https://junglewise.ai/threats/technologies/ag-ui). Vendors: [Ag-Ui-Protocol](https://junglewise.ai/threats/vendors/ag-ui-protocol).

## Quick answers

**Is CVE-2026-92361 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92361 being exploited in the wild.

**How severe is CVE-2026-92361?** Medium severity, with a CVSS score of 4.3, published 16 September 2026.

**Which products and versions are affected?** Ag-Ui-Protocol Ag-Ui 1.0.

**Is there a fix for CVE-2026-92361?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-92361 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-92361?** Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an uncontrolled resource consumption flaw (CWE-400) in the SSE Client component (sdks/community/go/pkg/client/sse/client.go, lines 191–303). The SSE client appends incoming event data, event lines, and id lines without enforcing per-item or total-size limits, causing unbounded memory growth during a single stream connection. An attacker controlling a malicious or compromised agent endpoint can trigger memory exhaustion on any client connecting to it via SSE. The attack requires network reachability to the agent endpoint but no authentication. A fix awaits acceptance in a pending pull request; remediation options include implementing per-event size caps, per-id length caps, and total stream budgets as used in the reference Dart SDK implementation.

## Affected products

- AG-UI Protocol ag-ui 1.0

## Timeline

- 2026-08-18: disclosed: Issue reported on GitHub
- 2026-09-16: advisory: CVE-2026-92361 published
- 2026-09-16: other: Patch pending acceptance

## References

- [https://github.com/ag-ui-protocol/ag-ui/](https://github.com/ag-ui-protocol/ag-ui/)
- [https://github.com/ag-ui-protocol/ag-ui/issues/2438](https://github.com/ag-ui-protocol/ag-ui/issues/2438)

## Related threats

- [ag-ui-protocol ag-ui resource exhaustion in interrupt expiry](https://junglewise.ai/threats/cve-2026-120237-a-flaw-has-been-found-in-ag-ui-protocol-ag-ui-up-to-0-0-58)
- [ag-ui Transport Decoder Handler improper input validation](https://junglewise.ai/threats/cve-2026-120236-a-vulnerability-was-detected-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui SSE parser resource exhaustion](https://junglewise.ai/threats/cve-2026-120235-a-security-vulnerability-has-been-detected-in-ag-ui-protocol-ag)
- [ag-ui HTTP Transport unbounded response buffering](https://junglewise.ai/threats/cve-2026-120234-a-weakness-has-been-identified-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui HttpAgent credential and request body forwarding via redirect](https://junglewise.ai/threats/cve-2026-120233-a-security-flaw-has-been-discovered-in-ag-ui-protocol-ag-ui-up)