CVE-2026-8769
vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- Record
CVE-2026-8769- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R - CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R - CVSS 2.0
- 4.0
AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR - Weakness
- CWE-400, CWE-404
- Updated
- 2026-11-02
EUVDEUVD-2026-30712
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- Record
EUVD-2026-30712- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-866g-f22w-33x8
@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue
Versions of @ai-sdk/provider-utils before 3.0.28, from 4.0.0 before 4.0.33, and from 5.0.0 before 5.0.1 are vulnerable to uncontrolled resource consumption. The createJsonResponseHandler, createJsonErrorResponseHandler, and createStatusCodeErrorResponseHandler functions in packages/provider-utils/src/response-handler.ts read response bodies without a shared size limit, allowing a remote attacker with low privileges to cause excessive memory consumption. The exploit has been publicly disclosed and may be utilized.
- Record
GHSA-866g-f22w-33x8- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- Record
CVE-2026-8769- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-400, CWE-404
- Updated
- 2026-11-02
OSVGHSA-866g-f22w-33x8
@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue
Versions of @ai-sdk/provider-utils before 3.0.28, from 4.0.0 before 4.0.33, and from 5.0.0 before 5.0.1 are vulnerable to uncontrolled resource consumption. The createJsonResponseHandler, createJsonErrorResponseHandler, and createStatusCodeErrorResponseHandler functions in packages/provider-utils/src/response-handler.ts read response bodies without a shared size limit, allowing a remote attacker with low privileges to cause excessive memory consumption. The exploit has been publicly disclosed and may be utilized.
- Record
GHSA-866g-f22w-33x8- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVCLSA-2026-1789472298 No score
TuxCare security update for @ai-sdk/provider-utils (1 CVE)
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 3.0.27-tuxcare.1.
- Record
CLSA-2026-1789472298- Updated
- 2026-11-02
Show 5 moreShow less
OSVCLSA-2026-1792161536 No score
TuxCare security update for @ai-sdk/provider-utils (1 CVE)
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 3.0.27-tuxcare.1.
- Record
CLSA-2026-1792161536- Updated
- 2026-11-02
OSVCLSA-2026-1793270505 No score
TuxCare security update for ai (1 CVE)
TuxCare rebuilt ai to address 1 CVE. Fixed in 2.2.8-tuxcare.1.
- Record
CLSA-2026-1793270505- Updated
- 2026-11-02
OSVCLSA-2026-1793271692 No score
TuxCare security update for @ai-sdk/provider-utils (1 CVE)
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 2.2.8-tuxcare.2.
- Record
CLSA-2026-1793271692- Updated
- 2026-11-02
OSVCLSA-2026-1793272798 No score
TuxCare security update for @ai-sdk/provider-utils (1 CVE)
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 4.0.27-tuxcare.1.
- Record
CLSA-2026-1793272798- Updated
- 2026-11-02
OSVCLSA-2026-1793276296 No score
TuxCare security update for @ai-sdk/openai (1 CVE)
TuxCare rebuilt @ai-sdk/openai to address 1 CVE. Fixed in 4.0.27-tuxcare.2.
- Record
CLSA-2026-1793276296- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
@ai-sdk/provider-utilsnpm |
before 3.0.28 | 3.0.28 |
@ai-sdk/provider-utilsnpm |
4.0.0-beta.10 up to 4.0.33 | 4.0.33 |
@ai-sdk/provider-utilsnpm |
5.0.0-beta.0 up to 5.0.1 | 5.0.1 |
@ai-sdk/provider-utilsTuxCare:npm |
3.0.27-tuxcare.0 up to 3.0.27-tuxcare.1, plus listed versions 3.0.27 |
3.0.27-tuxcare.1 |
aiTuxCare:npm |
2.2.8-tuxcare.0 up to 2.2.8-tuxcare.1, plus listed versions 2.2.8 |
2.2.8-tuxcare.1 |
@ai-sdk/provider-utilsTuxCare:npm |
2.2.8-tuxcare.0 up to 2.2.8-tuxcare.2, plus listed versions 2.2.8 |
2.2.8-tuxcare.2 |
@ai-sdk/provider-utilsTuxCare:npm |
4.0.27-tuxcare.0 up to 4.0.27-tuxcare.1, plus listed versions 4.0.27 |
4.0.27-tuxcare.1 |
@ai-sdk/openaiTuxCare:npm |
4.0.27-tuxcare.0 up to 4.0.27-tuxcare.2, plus listed versions 4.0.27 |
4.0.27-tuxcare.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-8769 is a medium vulnerability (CVSS 5.3) in Vercel Ai, published May 17, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in @ai-sdk/provider-utils 3.0.28.
References
vuldb.com/vuln/364394
gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb
nvd.nist.gov/vuln/detail/CVE-2026-8769
github.com/vercel/ai/pull/16374
Show 9 moreShow less