SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85100

MEDIUM · CVSS 4.3 EPSS 0.52% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Streaming Agent Response Workflow in 2FastLabs agent-squad versions up to 1.1.4, specifically within the AgentSquad.routeRequest function. Exploitation can lead to excessive resource consumption, potentially impacting system performance, and the attack can be executed remotely. Organizations using affected versions should prioritize remediation, especially given that the exploit is now public and the vendor has not yet addressed the issue.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85100
Severity
MEDIUM
CVSS
4.3
EPSS
0.52%

Original NVD Description

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.