CVE-2026-113706

LOW Status: Received

CVSS Scores

CVSS v3.x Base Score
3.5
LOW
CVSS v2 Base Score
4.0
MEDIUM

Description

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of the patch is 68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb. To fix this issue, it is recommended to deploy a patch.

Published
October 21, 2026 12:17 AM
Last Modified
October 21, 2026 12:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-200 CWE-284

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry