Read the docs
TI-2026-29344 Aliases CVE-2026-40608

Next AI Draw.io: Unbounded HTTP Body — Denial of Service

Priority MEDIUM 61CWE-770Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-770.

Summary

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers (/api/state, /api/restore, and /api/history-svg) that process incoming requests by accumulating the entire request body into a JavaScript string without any size limitations. Node.js buffers the entire payload in the V8 heap. Sending a sufficiently large body (e.g., 500 MiB or more) will exhaust the process heap memory, leading to an Out-of-Memory (OOM) error that crashes the MCP server. This vulnerability is fixed in 0.4.15.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00146 3rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed next-ai-draw-io (DayuanJiang): 0.4.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DayuanJiangnext-ai-draw-iobefore 0.4.150.4.15Patch availableCNA
  • next-ai-draw-io VendorDayuanJiang Affected before 0.4.15 Fixed in 0.4.15 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dayuanjiang:next_ai_draw.io:*:*:*:*:*:*:*:*before 0.4.15VulnerableDayuanJiang
  • cpe:2.3:a:dayuanjiang:next_ai_draw.io:*:*:*:*:*:*:*:* Versions before 0.4.15 Vulnerable ·DayuanJiang

Remediation

  • Fix · CNA next-ai-draw-io (DayuanJiang) Fixed in 0.4.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-40608

References

Exploit 1

Patch 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences