{"data":{"id":"8fac830c-7e3b-4107-88fa-5a7892a7df08","title":"CVE-2026-19645: IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit…","summary":"IBM MQ Agent CD versions v1.0.0, v1.0.1, v2.0.0 and v2.0.1 are affected by CVE-2026-19645. An authenticated user holding a valid session cookie can submit arbitrarily large or computationally expensive requests that hold LLM agent workers for tens of seconds to over ten minutes each. Concurrent requests of this kind exhaust the agent worker pool, degrading or fully disabling the AI Agent feature for all other IBM MQ Console users.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19645","publishedAt":"2026-09-04T16:17:24.923Z","cveId":"CVE-2026-19645","cweIds":["CWE-400"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM MQ Agent CD","IBM MQ Console AI Agent feature"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM MQ Agent CD denial of service via oversized requests to LLM agent workers","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00411,"epssCheckedAt":"2026-11-04T12:08:34.077Z","kevDateAdded":null,"advisoryAliases":["GHSA-x7m8-9qr5-36gh"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T12:08:25.493Z","patchAvailable":null,"disclosureDate":"2026-09-04T16:17:24.923Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}