CVE-2026-8769

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb	Exploit Third Party Advisory
https://vuldb.com/submit/811406	Third Party Advisory VDB Entry
https://vuldb.com/vuln/364394	Third Party Advisory VDB Entry
https://vuldb.com/vuln/364394/cti	Permissions Required VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*

History

14 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Se determinó una vulnerabilidad en vercel ai hasta la versión 3.0.97. El elemento afectado es la función createJsonResponseHandler/createJsonErrorResponseHandler del archivo packages/provider-utils/src/response-handler.ts del componente provider-utils. Esta manipulación provoca consumo de recursos. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera.

Information

Published : 2026-05-17 23:17

Updated : 2026-10-14 20:10

NVD link : CVE-2026-8769

Mitre link : CVE-2026-8769

CVE.ORG link : CVE-2026-8769

JSON object : View

Products Affected

vercel

ai

CWE

CWE-400

Uncontrolled Resource Consumption

CWE-404

Improper Resource Shutdown or Release

{"id": "CVE-2026-8769", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8769", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-18T20:12:31.099819Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"], "vendor": "vercel", "modules": ["provider-utils"], "product": "ai", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "3.0.3"}, {"status": "affected", "version": "3.0.4"}, {"status": "affected", "version": "3.0.5"}, {"status": "affected", "version": "3.0.6"}, {"status": "affected", "version": "3.0.7"}, {"status": "affected", "version": "3.0.8"}, {"status": "affected", "version": "3.0.9"}, {"status": "affected", "version": "3.0.10"}, {"status": "affected", "version": "3.0.11"}, {"status": "affected", "version": "3.0.12"}, {"status": "affected", "version": "3.0.13"}, {"status": "affected", "version": "3.0.14"}, {"status": "affected", "version": "3.0.15"}, {"status": "affected", "version": "3.0.16"}, {"status": "affected", "version": "3.0.17"}, {"status": "affected", "version": "3.0.18"}, {"status": "affected", "version": "3.0.19"}, {"status": "affected", "version": "3.0.20"}, {"status": "affected", "version": "3.0.21"}, {"status": "affected", "version": "3.0.22"}, {"status": "affected", "version": "3.0.23"}, {"status": "affected", "version": "3.0.24"}, {"status": "affected", "version": "3.0.25"}, {"status": "affected", "version": "3.0.26"}, {"status": "affected", "version": "3.0.27"}, {"status": "affected", "version": "3.0.28"}, {"status": "affected", "version": "3.0.29"}, {"status": "affected", "version": "3.0.30"}, {"status": "affected", "version": "3.0.31"}, {"status": "affected", "version": "3.0.32"}, {"status": "affected", "version": "3.0.33"}, {"status": "affected", "version": "3.0.34"}, {"status": "affected", "version": "3.0.35"}, {"status": "affected", "version": "3.0.36"}, {"status": "affected", "version": "3.0.37"}, {"status": "affected", "version": "3.0.38"}, {"status": "affected", "version": "3.0.39"}, {"status": "affected", "version": "3.0.40"}, {"status": "affected", "version": "3.0.41"}, {"status": "affected", "version": "3.0.42"}, {"status": "affected", "version": "3.0.43"}, {"status": "affected", "version": "3.0.44"}, {"status": "affected", "version": "3.0.45"}, {"status": "affected", "version": "3.0.46"}, {"status": "affected", "version": "3.0.47"}, {"status": "affected", "version": "3.0.48"}, {"status": "affected", "version": "3.0.49"}, {"status": "affected", "version": "3.0.50"}, {"status": "affected", "version": "3.0.51"}, {"status": "affected", "version": "3.0.52"}, {"status": "affected", "version": "3.0.53"}, {"status": "affected", "version": "3.0.54"}, {"status": "affected", "version": "3.0.55"}, {"status": "affected", "version": "3.0.56"}, {"status": "affected", "version": "3.0.57"}, {"status": "affected", "version": "3.0.58"}, {"status": "affected", "version": "3.0.59"}, {"status": "affected", "version": "3.0.60"}, {"status": "affected", "version": "3.0.61"}, {"status": "affected", "version": "3.0.62"}, {"status": "affected", "version": "3.0.63"}, {"status": "affected", "version": "3.0.64"}, {"status": "affected", "version": "3.0.65"}, {"status": "affected", "version": "3.0.66"}, {"status": "affected", "version": "3.0.67"}, {"status": "affected", "version": "3.0.68"}, {"status": "affected", "version": "3.0.69"}, {"status": "affected", "version": "3.0.70"}, {"status": "affected", "version": "3.0.71"}, {"status": "affected", "version": "3.0.72"}, {"status": "affected", "version": "3.0.73"}, {"status": "affected", "version": "3.0.74"}, {"status": "affected", "version": "3.0.75"}, {"status": "affected", "version": "3.0.76"}, {"status": "affected", "version": "3.0.77"}, {"status": "affected", "version": "3.0.78"}, {"status": "affected", "version": "3.0.79"}, {"status": "affected", "version": "3.0.80"}, {"status": "affected", "version": "3.0.81"}, {"status": "affected", "version": "3.0.82"}, {"status": "affected", "version": "3.0.83"}, {"status": "affected", "version": "3.0.84"}, {"status": "affected", "version": "3.0.85"}, {"status": "affected", "version": "3.0.86"}, {"status": "affected", "version": "3.0.87"}, {"status": "affected", "version": "3.0.88"}, {"status": "affected", "version": "3.0.89"}, {"status": "affected", "version": "3.0.90"}, {"status": "affected", "version": "3.0.91"}, {"status": "affected", "version": "3.0.92"}, {"status": "affected", "version": "3.0.93"}, {"status": "affected", "version": "3.0.94"}, {"status": "affected", "version": "3.0.95"}, {"status": "affected", "version": "3.0.96"}, {"status": "affected", "version": "3.0.97"}]}]}], "published": "2026-05-17T23:17:03.180", "references": [{"url": "https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb", "tags": ["Exploit", "Third Party Advisory"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/811406", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/364394", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/364394/cti", "tags": ["Permissions Required", "VDB Entry"], "source": "cna@vuldb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-404"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se determin\u00f3 una vulnerabilidad en vercel ai hasta la versi\u00f3n 3.0.97. El elemento afectado es la funci\u00f3n createJsonResponseHandler/createJsonErrorResponseHandler del archivo packages/provider-utils/src/response-handler.ts del componente provider-utils. Esta manipulaci\u00f3n provoca consumo de recursos. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "lastModified": "2026-10-14T20:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C80CA5C-3BEC-499F-85D5-5E81491D37D6", "versionEndIncluding": "3.0.97"}], "operator": "OR"}]}], "sourceIdentifier": "cna@vuldb.com"}