CVE-2026-101098

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui versions prior to 2026-09-23

Description A remote issue exists in the HTTP Handler component within the readAllBytes() function of the JdkAgentHttpHandler.java file. Manipulation of this function can lead to excessive resource consumption.

Recommendations As a temporary workaround, restrict access to the readAllBytes() function in the JdkAgentHttpHandler.java file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.