CVE-2026-116477

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. Upgrading to version 1.0.0-preview3 is sufficient to resolve this issue. The identifier of the patch is ccbd12b6108a6a8f0fd5d8b4a9ece3c8a94ba1e4. Upgrading the affected component is recommended.

• CWE-200
• CWE-209

• https://github.com/a2aproject/a2a-dotnet/
• https://github.com/a2aproject/a2a-dotnet/commit/ccbd12b6108a6a8f0fd5d8b4a9ece3c8a94ba1e4
• https://github.com/a2aproject/a2a-dotnet/pull/452
• https://github.com/a2aproject/a2a-dotnet/releases/tag/v1.0.0-preview3
• https://vuldb.com/cve/CVE-2026-116477
• https://vuldb.com/submit/1014890
• https://vuldb.com/vuln/426390
• https://vuldb.com/vuln/426390/cti

Published

Oct 26, 2026

Last Modified

Oct 27, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116463A vulnerability was identified in FastStone Image Viewer up …6.3
• CVE-2026-116467A security flaw has been discovered in ggml-org llama.cpp up…5.3
• CVE-2026-116469MISP Guard, a proxy-based security filter for MISP feed dist…7.1
• CVE-2026-11647Use after free in Printing in Google Chrome on Android prior…8.3
• CVE-2026-116471A security flaw has been discovered in BKWLD Decoy up to 5.1…4.3
• CVE-2026-116476A weakness has been identified in a2aproject a2a-dotnet up t…5.4
• CVE-2026-116478A vulnerability was detected in a2aproject a2a-go up to 2.4.…5.3
• CVE-2026-116479A flaw has been found in a2aproject a2a-java up to 1.2.0.Fin…4.3
• CVE-2026-11648Use after free in FullScreen in Google Chrome on Windows pri…8.8
• CVE-2026-116482A vulnerability has been found in subhajitkhan online-clinic…3.5
• CVE-2026-116485danmu_api before 1.21.7 contains an authentication bypass vu…9.8
• CVE-2026-116486Objenesis before 3.6 contains a type confusion vulnerability…4.5