Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-30350: Agent Protocol Server: Denial of Service via Malformed Search Request
CVE-2026-30350 · published 6 months ago
Summary
A flaw in the Agent Protocol Server's search function can be exploited by sending a specially crafted request, potentially causing the server to become unresponsive. This could disrupt service for users. It is recommended to update the Agent Protocol Server to the latest version to address this issue.
Original advisory text
An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
7.5
High
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published27 Apr 2026
Updated4 Nov 2026
First seen27 Apr 2026
Sources
CVE-2026-30350 · NVD
Track software like this
Free during beta