Vercel patches AI SDK flaw that turned 7.5 KB into 53.9 MB

Vercel patched a flaw in its AI SDK in which a 7,550-byte malformed request produced a 53,898,977-byte exception before any agent or model ran, according to Vercel's reproduction in the merged fix dated November 13th, 2026. Vercel said its validator built a full union error tree for each of 2,500 bad parts; the patch reports the first failure instead, changing core UI-message validation shared across providers.

Vercel patches AI SDK flaw that turned 7.5 KB into 53.9 MB Vercel says its validator built a full union error tree for each of 2,500 bad parts. The patch reports the first failure instead. By RuntimeWire Staff https://runtimewire.com/author/runtimewire-staff · Published A 7,550-byte malformed request produced a 53,898,977-byte exception in Vercel's AI SDK before any agent or model ran, according to Vercel's reproduction in the merged fix. Vercel, founded by Guillermo Rauch, dated the patch November 13th, 2026; it changes core UI-message validation shared across providers.…