CVE-2026-120237 Details
Description
A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/index.ts of the component Interrupt expiry. This manipulation causes resource consumption. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
A denial-of-service vulnerability has been identified in the AG-UI Protocol's client library, specifically in versions through 0.0.58. The issue arises in the interrupt expiry handling, where missing expiration timestamps are incorrectly treated as not expired. This flaw can lead to excessive resource consumption, as interrupts that should have cleared remain pending indefinitely, effectively 'bricking' the thread's execution. The vulnerability can be exploited remotely, causing a user-facing lockup in the agent's session.
The suggested fix is to default the 'expiresAt' field to a bounded time-to-live when it is omitted, or to reject interrupts that do not include an expiration. Additionally, implementing a maximum limit on pending interrupts per thread could help prevent this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 1, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ag-ui-protocol/ag-ui/ | [email protected] | Source CodeVendor |
| https://github.com/ag-ui-protocol/ag-ui/issues/2525 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ag-ui-protocol/ag-ui/pull/3241 | [email protected] | Issue TrackingVendor |
| https://vuldb.com/cve/CVE-2026-120237 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1015179 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/429596 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/429596/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-404 | Improper Resource Shutdown or Release | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ag-ui-protocol ag-ui | <= 0.0.58 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Nov 1, 2026 | New CVE Received | [email protected] |