Resource Consumption Vulnerability in a2aproject a2a-go
CVE-2026-117503

6.9MEDIUM

Key Information:

Vendor

A2aproject

Status
A2a-go
Vendor
CVE Published:
27 October 2026

What is CVE-2026-117503?

A resource consumption vulnerability exists in a2aproject's a2a-go software affecting versions up to 2.4.0. It is related to a function within the REST SSE handler located in the file a2asrv/rest.go. This vulnerability allows malicious actors to exploit the software remotely, potentially leading to excessive resource consumption. It is recommended for users to upgrade to version 2.5.0 or later to resolve this issue. For more information, you can refer to the provided references.

Affected Version(s)

a2a-go 2.0

a2a-go 2.1

a2a-go 2.2

References

https://vuldb.com/vuln/427070
vdb-entry
https://vuldb.com/vuln/427070/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-117503
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

colorfullbz (VulDB User)
.