The vulnerability CVE-2026-92114 affects the a2ui-project a2ui software up to version 0.10.6. It arises from inefficient regular expression complexity in an unspecified function located in renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the Basic Catalog component. This inefficiency can be triggered remotely, likely causing excessive resource consumption or denial of service conditions due to the complexity of the regex processing.

An attacker can remotely exploit this vulnerability to cause inefficient processing of regular expressions, which may lead to resource exhaustion or degraded performance of the affected system. There is no indication of privilege escalation, data disclosure, or code execution. No known exploits are reported in the wild.

No patch or official fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected component to untrusted inputs or network segments to reduce risk.