CVE-2026-8769: vercel ai Uncontrolled Resource Consumption
CVSS: 6.5v3.1MediumAnalyzed
AliasesCGA-jmhx-f6xm-qr65CGA-pjhf-5r4x-95hcGHSA-866g-f22w-33x8CGA-22f7-925m-q2f8CGA-2p4m-xp6x-gvx8CGA-2x5q-v8j7-hfgxCGA-34vv-5vcf-p485CGA-3gv7-897x-v6v6CGA-46x2-mrc2-3829CGA-5q8r-3f3q-hw7hCGA-5x2j-xqfm-p7qgCGA-6p67-3pf8-2wx4CGA-7fxr-v4pc-fj47CGA-8723-44m2-4f6mCGA-8mp4-q2rh-jx8jCGA-8pgj-xwcv-gmwfCGA-92vr-8cxf-9mmqCGA-9fp4-rx6g-g2w5CGA-9jmj-6269-59f5CGA-9v7p-f6q5-w8w4CGA-c62c-v786-92wfCGA-f5fp-v497-7p2jCGA-g65w-jcj5-848xCGA-gfgq-6jmg-rwx6CGA-gggw-p92m-35ppCGA-gp36-jpw2-jcvvCGA-hhw9-4c99-f7vqCGA-j2fm-pqh5-4pcrCGA-j2fv-q2gg-69qfCGA-jg2w-7f2f-vf24CGA-jj7h-j6f3-88cmCGA-jvrx-f53p-j74gCGA-pw3h-2m76-hjwrCGA-qx6m-5f7p-xgcvCGA-r43w-3rrf-h75mCGA-rg34-2x4q-2m6fCGA-rq42-g5f9-rrr2CGA-v7gr-cf78-v73jCGA-vc2v-26mf-85xgCGA-vcgv-h5c5-9264CGA-vm8j-c968-wmx7CGA-w29h-64pc-p9q7CGA-w55h-9rr5-965xCGA-w9qg-h673-cqq2CGA-wpwm-grw9-rv87CGA-x29g-rffc-fr6cCGA-x9vj-xf2p-845jCGA-xfm3-jfrh-xf52CGA-xp93-2pg8-2q5q
Published 17-05-2026Last modified 18-05-2026
Vulnerability summary
CVE-2026-8769 is a medium (CVSS 6.5) Uncontrolled Resource Consumption vulnerability in vercel ai. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
6.5/10
010
Medium · v3.1 (NVD)EPSS score
0.56%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 17-05-2026PublishedVulnerability first disclosed.
- 18-05-2026Last modifiedVulnerability information updated.
Description
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS metrics
13 scores · 5 sources · 4 versionsMedium 5.3Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:PSources5 sources · 2.1–5.3
- OSV · WolfiEcosystem advisory · calculated5.3MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- OSV · NpmEcosystem advisory · calculated5.3MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- OSV · ChainguardEcosystem advisory · calculated5.3MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- NVDNIST2.1LowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XDiffers
Medium 6.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSources5 sources · 4.3–6.5
- CVE.orgCNA4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:RDiffers
- OSV · WolfiEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · NpmEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · ChainguardEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LDiffers
Medium 4.3Preferred score · CVE.org (CNA)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:RSourcesSingle source
Medium 4.0Preferred score · CVE.org (CNA)
AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:URSourcesAll 2 agree
- NVDNIST4.0MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
EPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
0.00 pp
From 0.56% on 21-09-2026
21-09-202621-10-2026
EPSS score0.56%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundFb1096Bc8428Bed9A428F764D9D103Bb
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Chainguard22 products
- kibana-8.19< 8.19.22-r5
- kibana-8.19-bitnami< 8.19.22-r5
- kibana-8.19-iamguardedAll versions (No fix recorded)
- kibana-9.0All versions (No fix recorded)
- kibana-9.0-bitnamiAll versions (No fix recorded)
@ai-sdk1 product
- provider-utils< 3.0.28 | ≥ 4.0.0-beta.10, < 4.0.33 | ≥ 5.0.0-beta.0, < 5.0.1
Vercel1 product
- ai3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.0.20 | 3.0.21 | 3.0.22 | 3.0.23 | 3.0.24 | 3.0.25 | 3.0.26 | 3.0.27 | 3.0.28 | 3.0.29 | 3.0.30 | 3.0.31 | 3.0.32 | 3.0.33 | 3.0.34 | 3.0.35 | 3.0.36 | 3.0.37 | 3.0.38 | 3.0.39 | 3.0.40 | 3.0.41 | 3.0.42 | 3.0.43 | 3.0.44 | 3.0.45 | 3.0.46 | 3.0.47 | 3.0.48 | 3.0.49 | 3.0.50 | 3.0.51 | 3.0.52 | 3.0.53 | 3.0.54 | 3.0.55 | 3.0.56 | 3.0.57 | 3.0.58 | 3.0.59 | 3.0.60 | 3.0.61 | 3.0.62 | 3.0.63 | 3.0.64 | 3.0.65 | 3.0.66 | 3.0.67 | 3.0.68 | 3.0.69 | 3.0.70 | 3.0.71 | 3.0.72 | 3.0.73 | 3.0.74 | 3.0.75 | 3.0.76 | 3.0.77 | 3.0.78 | 3.0.79 | 3.0.80 | 3.0.81 | 3.0.82 | 3.0.83 | 3.0.84 | 3.0.85 | 3.0.86 | 3.0.87 | 3.0.88 | 3.0.89 | 3.0.90 | 3.0.91 | 3.0.92 | 3.0.93 | 3.0.94 | 3.0.95 | 3.0.96 | 3.0.97 | ≤ 3.0.97
Wolfi1 product
- langfuse-3-workerAll versions (No fix recorded)
4 vendors · 25 products
References
14 links
- github.com/vercel/aiPACKAGE