---
id: "CVE-2026-120237"
kind: "vulnerability"
aliases: ["CVE-2026-120237"]
title: "ag-ui protocol: interrupt expiry check lets remote requests exhaust resources"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ag-ui", "ai-agents", "ai-tooling", "typescript"]
not_affected_if: ["no-ag-ui-interrupts", "versions-above-0.0.58"]
published_at: "2026-11-01T18:17:13+00:00"
first_seen_at: "2026-11-01T18:21:31+00:00"
updated_at: "2026-11-01T18:23:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120237", "first_seen_at": "2026-11-01T18:21:31+00:00"}]
---

# ag-ui protocol: interrupt expiry check lets remote requests exhaust resources

The ag-ui-protocol TypeScript client, up to version 0.0.58, has a flaw in its interrupt expiry check (isInterruptExpired). A remote attacker can trigger excessive resource consumption, and a public exploit has been published.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the `@ag-ui/client` or `ag-ui-protocol` package in your lockfile, looking for versions up to `0.0.58`
- Search your code for uses of `isInterruptExpired` from the ag-ui client package

## Fix

- Fixed version: unknown; a pull request to fix the issue is awaiting acceptance

## Timeline

- 2026-11-01T18:21:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120237

## From the sources

A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/index.ts of the component Interrupt expiry. This manipulation causes resource consumption. Remote exploitation of the attack is possible. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_