CVE-2026-116476 | a2aproject a2a-dotnet up to 1.0.0-preview3 TaskProjection TaskProjection.ApplyStatus race condition (ID 453)

October 26, 2026 Yanac

A vulnerability was found in a2aproject a2a-dotnet up to 1.0.0-preview3 and classified as problematic. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition.

This vulnerability appears as CVE-2026-116476. The attack may be performed from remote. There is no available exploit.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More