CVE-2026-113705: a2aproject a2a-rs error.rs information exposure
A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called 713b943af94ab2d521d483b841618b97a2e78a4d. A patch should be applied to remediate this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
a2aproject/a2a-rsto a version that resolves this vulnerability.Patch 713b943af94ab2d521d483b841618b97a2e78a4d
Event History
Frequently Asked Questions
What versions are affected?
The issue affects a2aproject a2a-rs through version 0.4.3. The provided data does not identify the first fixed release version.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.
What is the expected impact of successful exploitation?
Successful exploitation can expose information through error messages. The severity vector indicates low confidentiality impact and no integrity or availability impact.
What remediation is available?
Apply the patch identified as commit 713b943af94ab2d521d483b841618b97a2e78a4d. The provided data does not describe a workaround if patching cannot be performed immediately.