CVE-2026-116478 | a2aproject a2a-go up to 2.4.0 Push Notification a2asrv/agentexec.go CreateExecutor information exposure (ID 393)

October 26, 2026 Yanac

A vulnerability was found in a2aproject a2a-go up to 2.4.0. It has been declared as problematic. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message.

This vulnerability is known as CVE-2026-116478. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More