Information Disclosure Vulnerability in a2aproject's a2a-rs

CVE-2026-113706

What is CVE-2026-113706?

A vulnerability has been detected in the a2aproject's a2a-rs application, specifically in its inmemory.rs file. The issue arises from an exploitable manipulation of the historyLength argument, which can lead to unauthorized information disclosure. This security flaw can be remotely exploited, allowing malicious actors to gain access to sensitive data. To address this vulnerability, it is imperative to apply the available patch identified by commit 68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb.

References