# CVE-2026-92363: ag-ui-protocol ag-ui resource consumption in SSE parser

Source: https://junglewise.ai/threats/cve-2026-92363-ag-ui-protocol-ag-ui-resource-consumption-in-sse-parser  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-16. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-92363 · Severity: medium · CVSS 4.3 · Published 2026-09-16

AG-UI is a protocol library for integrating AI agents into frontend applications. A vulnerability in its Server-Sent Events (SSE) parser component allows remote attackers to cause excessive resource consumption by manipulating the parser's buffer handling, potentially leading to denial of service.

Technologies: [Ag-Ui-Protocol Ag-Ui](https://junglewise.ai/threats/technologies/ag-ui). Vendors: [Ag-Ui-Protocol](https://junglewise.ai/threats/vendors/ag-ui-protocol).

## Quick answers

**Is CVE-2026-92363 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92363 being exploited in the wild.

**How severe is CVE-2026-92363?** Medium severity, with a CVSS score of 4.3, published 16 September 2026.

**Which products and versions are affected?** Ag-Ui-Protocol Ag-Ui 1.0.

**Is there a fix for CVE-2026-92363?** A patch was published on 2026-09-16: commit ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-92363 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-92363?** Check whether you run Ag-Ui-Protocol Ag-Ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the SSE parser component (src/stream/sse_parser.cpp) of ag-ui version 1.0, where the per-event accumulator is not properly counted against the SSE buffer capacity limit. This allows an attacker to send specially crafted SSE messages that bypass buffer constraints, causing unbounded resource consumption. The attack is network-accessible and requires no authentication. The impact is denial of service through resource exhaustion. A patch is available in commit ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186.

## Affected products

- ag-ui-protocol ag-ui 1.0

## Timeline

- 2026-09-16: disclosed
- 2026-09-16: patched: commit ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186

## References

- [https://github.com/ag-ui-protocol/ag-ui/](https://github.com/ag-ui-protocol/ag-ui/)
- [https://github.com/ag-ui-protocol/ag-ui/commit/ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186](https://github.com/ag-ui-protocol/ag-ui/commit/ab6e0bc298996caac2b4b0b3ec0bd8d32a15a186)

## Related threats

- [ag-ui-protocol ag-ui resource exhaustion in interrupt expiry](https://junglewise.ai/threats/cve-2026-120237-a-flaw-has-been-found-in-ag-ui-protocol-ag-ui-up-to-0-0-58)
- [ag-ui Transport Decoder Handler improper input validation](https://junglewise.ai/threats/cve-2026-120236-a-vulnerability-was-detected-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui SSE parser resource exhaustion](https://junglewise.ai/threats/cve-2026-120235-a-security-vulnerability-has-been-detected-in-ag-ui-protocol-ag)
- [ag-ui HTTP Transport unbounded response buffering](https://junglewise.ai/threats/cve-2026-120234-a-weakness-has-been-identified-in-ag-ui-protocol-ag-ui-up-to-0-0)
- [ag-ui HttpAgent credential and request body forwarding via redirect](https://junglewise.ai/threats/cve-2026-120233-a-security-flaw-has-been-discovered-in-ag-ui-protocol-ag-ui-up)