CVE-2026-19645: IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily
Summary
In IBM MQ Agent CD versions 1.0.0, 1.0.1, 2.0.0, and 2.0.1, a logged-in user can send extremely large or computationally expensive requests that tie up the LLM agent workers (the programs handling AI tasks) for very long periods, sometimes over ten minutes each. When many such requests are sent at once, all the available workers become blocked, making the AI Agent feature slow or completely unavailable for other users.
Vulnerability Details
6.5(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
network
low
low
none
September 4, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-47482: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory
CVE-2022-29200: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19645
First tracked: September 4, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 85%