Resource Consumption in ag-ui-protocol ag-ui via HTTP Handler

Executive Summary

This vulnerability is a resource consumption issue in the ag-ui-protocol library's HTTP handler. The function readAllBytes in JdkAgentHttpHandler.java reads the entire HTTP request body into memory without size limits, which can cause memory exhaustion if large requests are sent repeatedly. The attack can be launched remotely.

Useful 0 Not Useful 0

Detection Guidance

Monitor for unusually high memory usage on the server hosting ag-ui, particularly in the Java process. Check for repeated HTTP 413 errors if the fix is applied. Inspect network traffic for large POST requests to the agent endpoint. Use tools like netstat or ss to track connections and lsof to check open files and memory allocations.

Useful 0 Not Useful 0

Impact Analysis

An attacker could send large POST requests to the vulnerable endpoint, causing the server to consume excessive memory. This may lead to performance degradation, crashes, or denial-of-service conditions. The impact depends on deployment configurations and existing protections.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability could lead to uncontrolled resource consumption via memory exhaustion from large POST requests, potentially causing denial-of-service conditions. This may impact compliance by disrupting availability requirements in GDPR (Article 32) and HIPAA (Security Rule §164.312(a)(1)), which mandate safeguards against service disruptions and unauthorized resource usage.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the pull request fix to enforce a configurable maximum body size (default 8 MiB) in JdkAgentHttpHandler.java. Configure reverse-proxy body limits (e.g., Nginx client_max_body_size, Apache LimitRequestBody) to match or exceed the handler's limit. Monitor for HTTP 413 errors and adjust limits as needed.

Useful 0 Not Useful 0