CVE-2026-19645: IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers ...

Added to the CISA Known Exploited Vulnerabilities catalog on 04 Sep 2026. Vendor: AI/ML. Product: LLM. CVSS score: 6.5.

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When ...

Required action: Review and patch if applicable to your AI infrastructure.