CVE-2026-113706

3.5 LOWpublic exploit available

Published 2026-10-21 · Updated 2026-10-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of the patch is 68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb. To fix this issue, it is recommended to deploy a patch.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weaknesses

CWE-200, CWE-284

Public exploit & PoC references

https://github.com/a2aproject/a2a-rs/
https://github.com/a2aproject/a2a-rs/commit/68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb
https://github.com/a2aproject/a2a-rs/pull/122

All references

https://github.com/a2aproject/a2a-rs/
https://github.com/a2aproject/a2a-rs/commit/68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb
https://github.com/a2aproject/a2a-rs/pull/122
https://vuldb.com/cve/CVE-2026-113706
https://vuldb.com/submit/1015040
https://vuldb.com/vuln/422868
https://vuldb.com/vuln/422868/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2013-10077PoC
MEDIUMCVE-2026-100906PoC
MEDIUMCVE-2026-100907PoC
MEDIUMCVE-2026-101055PoC
MEDIUMCVE-2026-101083
MEDIUMCVE-2026-101143
MEDIUMCVE-2026-101146
MEDIUMCVE-2026-102845PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.