CVE-2026-113707 | a2aproject a2a-rs up to 0.4.4 inmemory.rs update race condition (ID 126)

October 20, 2026 Yanac

A vulnerability described as problematic has been identified in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory.rs. The manipulation results in race condition.

This vulnerability was named CVE-2026-113707. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More