CVE-2026-113706 | a2aproject a2a-rs up to 0.4.3 inmemory.rs historyLength information disclosure (ID 122)

October 20, 2026 Yanac

A vulnerability marked as problematic has been reported in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-113706. The attack is possible to be carried out remotely. No exploit exists.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More