CVE-2026-19645

6.5 Moyenne

Publiée le 04/09/2026 à 18:17 · Modifiée le 10/09/2026 à 23:17 · En attente d'analyse NVD · Source : psirt@us.ibm.com

Description

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When multiple such requests are sentconcurrently, the agent worker pool becomes exhausted, causing all other IBM MQ Console users toexperience degraded performance or complete unavailability of the AI Agent feature.

Traduire en français

Produits concernés

IBM MQ Agent

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	psirt@us.ibm.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-400

Références

https://www.ibm.com/support/pages/node/7285394

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories