CVE-2026-111763

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to forward a configured API key to a third-party server. When a client application configures credentials through `CredentialService`, `AuthInterceptor.intercept` in `client/transport/spi/src/main/java/org/a2aproject/sdk/client/transport/spi/interceptors/auth/AuthInterceptor.java` uses `APIKeySecurityScheme.name()` from the remote AgentCard directly as the HTTP header name containing the credential, without checking that the declared location is HEADER. JdkA2AHttpClient uses followRedirects(NORMAL), so an agent-controlled cross-origin redirect forwards the custom credential-bearing header even when the standard Authorization header is stripped. The attack requires configured API key credentials for the agent's security scheme and control of the agent's AgentCard and redirect response, but no additional client privileges. This issue is fixed in version 1.3.0.Final.

• CWE-522

• https://github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e
• https://github.com/a2aproject/a2a-java/pull/1097
• https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final
• https://github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg
• https://github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx

Published

Oct 20, 2026

Last Modified

Oct 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-111757Hono is a Web application framework that provides support fo…5.3
• CVE-2026-111758markdown-it is a Markdown parser. From versions 14.1.0 to be…7.5
• CVE-2026-111759markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2…7.5
• CVE-2026-11176Inappropriate implementation in Media in Google Chrome prior…6.5
• CVE-2026-111761A2A Java SDK is the official Java SDK for the Agent2Agent (A…5.8
• CVE-2026-111762A2A Java SDK is the official Java SDK for the Agent2Agent (A…5.7
• CVE-2026-111764A2A Java SDK is the official Java SDK for the Agent2Agent (A…7.5
• CVE-2026-111765A2A Java SDK is the official Java SDK for the Agent2Agent (A…7.5
• CVE-2026-111766markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3…3.7
• CVE-2026-111767MCP TypeScript SDK is the official TypeScript SDK for Model …8.6
• CVE-2026-11177Use after free in Omnibox in Google Chrome prior to 149.0.78…8.8
• CVE-2026-11178Insufficient policy enforcement in WebView in Google Chrome …4.3