CVE-2026-8769 - Vulnerability Details

- vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

Description

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-05-17

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

vercel

affected

Version	Status	Constraints
`3.0.0`	affected	—
`3.0.1`	affected	—
`3.0.2`	affected	—
`3.0.3`	affected	—
`3.0.4`	affected	—
`3.0.5`	affected	—
`3.0.6`	affected	—
`3.0.7`	affected	—
`3.0.8`	affected	—
`3.0.9`	affected	—
`3.0.10`	affected	—
`3.0.11`	affected	—
`3.0.12`	affected	—
`3.0.13`	affected	—
`3.0.14`	affected	—
`3.0.15`	affected	—
`3.0.16`	affected	—
`3.0.17`	affected	—
`3.0.18`	affected	—
`3.0.19`	affected	—
`3.0.20`	affected	—
`3.0.21`	affected	—
`3.0.22`	affected	—
`3.0.23`	affected	—
`3.0.24`	affected	—
`3.0.25`	affected	—
`3.0.26`	affected	—
`3.0.27`	affected	—
`3.0.28`	affected	—
`3.0.29`	affected	—
`3.0.30`	affected	—
`3.0.31`	affected	—
`3.0.32`	affected	—
`3.0.33`	affected	—
`3.0.34`	affected	—
`3.0.35`	affected	—
`3.0.36`	affected	—
`3.0.37`	affected	—
`3.0.38`	affected	—
`3.0.39`	affected	—
`3.0.40`	affected	—
`3.0.41`	affected	—
`3.0.42`	affected	—
`3.0.43`	affected	—
`3.0.44`	affected	—
`3.0.45`	affected	—
`3.0.46`	affected	—
`3.0.47`	affected	—
`3.0.48`	affected	—
`3.0.49`	affected	—
`3.0.50`	affected	—
`3.0.51`	affected	—
`3.0.52`	affected	—
`3.0.53`	affected	—
`3.0.54`	affected	—
`3.0.55`	affected	—
`3.0.56`	affected	—
`3.0.57`	affected	—
`3.0.58`	affected	—
`3.0.59`	affected	—
`3.0.60`	affected	—
`3.0.61`	affected	—
`3.0.62`	affected	—
`3.0.63`	affected	—
`3.0.64`	affected	—
`3.0.65`	affected	—
`3.0.66`	affected	—
`3.0.67`	affected	—
`3.0.68`	affected	—
`3.0.69`	affected	—
`3.0.70`	affected	—
`3.0.71`	affected	—
`3.0.72`	affected	—
`3.0.73`	affected	—
`3.0.74`	affected	—
`3.0.75`	affected	—
`3.0.76`	affected	—
`3.0.77`	affected	—
`3.0.78`	affected	—
`3.0.79`	affected	—
`3.0.80`	affected	—
`3.0.81`	affected	—
`3.0.82`	affected	—
`3.0.83`	affected	—
`3.0.84`	affected	—
`3.0.85`	affected	—
`3.0.86`	affected	—
`3.0.87`	affected	—
`3.0.88`	affected	—
`3.0.89`	affected	—
`3.0.90`	affected	—
`3.0.91`	affected	—
`3.0.92`	affected	—
`3.0.93`	affected	—
`3.0.94`	affected	—
`3.0.95`	affected	—
`3.0.96`	affected	—
`3.0.97`	affected	—

Configuration 1 [-]

cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*

No data.

Vendor Product Confidence Versions

Vercel

100%

Version	Status	Scheme	Platform
`[3.0.0,3.0.97]`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Github GHSA	GHSA-866g-f22w-33x8	@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00561.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb
https://vuldb.com/submit/811406
https://vuldb.com/vuln/364394
https://vuldb.com/vuln/364394/cti

History

Mon, 18 May 2026 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 17 May 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title		vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
First Time appeared		Vercel Vercel ai
Weaknesses		CWE-400 CWE-404
CPEs		cpe:2.3:a:vercel:ai::::::::
Vendors & Products		Vercel Vercel ai
References		https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb https://vuldb.com/submit/811406 https://vuldb.com/vuln/364394 https://vuldb.com/vuln/364394/cti
Metrics		cvssV2_0 `{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}` cvssV3_0 `{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Vercel Ai

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-05-17T23:00:13.988Z

Updated: 2026-05-18T20:13:40.558Z

Reserved: 2026-05-17T09:28:09.002Z

Link: CVE-2026-8769

Vulnrichment

Updated: 2026-05-18T20:13:36.286Z

NVD

Status : Analyzed

Published: 2026-05-17T23:17:03.180

Modified: 2026-06-17T11:04:26.160

Link: CVE-2026-8769

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-05-18T00:30:13Z

Weaknesses

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object