CVE-2026-8769 vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
Remote attackers can cause resource consumption and denial of service in the Vercel AI SDK via the response handler functions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-8769?
CVE-2026-8769 is a medium-severity denial of service vulnerability in vercel ai, published on 17 May 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Which versions are affected by CVE-2026-8769?
6 open source packages ship an affected version, including @ai-sdk/provider-utils. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
@ai-sdk/provider-utils npm | All versions | 3.0.28 |
@ai-sdk/provider-utils npm | All versions | 3.0.28 |
@ai-sdk/provider-utils npm | From 4.0.0-beta.10 | 4.0.33 |
@ai-sdk/provider-utils npm | From 4.0.0-beta.10 | 4.0.33 |
@ai-sdk/provider-utils npm | From 5.0.0-beta.0 | 5.0.1 |
@ai-sdk/provider-utils npm | From 5.0.0-beta.0 | 5.0.1 |
Products include Vercel Ai.
How do I fix CVE-2026-8769?
Upgrade @ai-sdk/provider-utils to a fixed version for your release line: 3.0.28, 4.0.33 or 5.0.1.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-8769 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-8769 exists.
Other vulnerabilities in vercel ai
Sources
Also known as CLEANSTART-2026-ST69641, CLSA-2026-1792161536, CLSA-2026-1793270505, CLSA-2026-1793271692, CLSA-2026-1793272798, CLSA-2026-1793276296 and 14 more.