CVE-2026-90790

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function _dispatch_notification of the file src/a2a/server/tasks/base_push_notification_sender.py of the component Push Notification Sender. The manipulation of the argument push_info.url leads to server-side request forgery. Remote exploitation of the attack is possible. Upgrading to version 1.1.4 is able to mitigate this issue. It is suggested to upgrade the affected component.

• CWE-918

• https://github.com/a2aproject/a2a-python/
• https://github.com/a2aproject/a2a-python/pull/1164
• https://github.com/a2aproject/a2a-python/pull/1169
• https://github.com/a2aproject/a2a-python/releases/tag/v1.1.4
• https://vuldb.com/cve/CVE-2026-90790
• https://vuldb.com/submit/919747
• https://vuldb.com/vuln/403296
• https://vuldb.com/vuln/403296/cti

Published

Sep 14, 2026

Last Modified

Sep 15, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90785A vulnerability was found in Dvidelabs flatcc up to 0.6.3. T…5.3
• CVE-2026-90786A vulnerability was determined in Dvidelabs flatcc up to 0.6…5.3
• CVE-2026-90787A vulnerability was identified in Soarkey StudentManagement …7.3
• CVE-2026-90788A security flaw has been discovered in magicblack MacCMS10 2…4.7
• CVE-2026-90789A weakness has been identified in itsourcecode Leave Managem…7.3
• CVE-2026-9079libcurl had a flaw that when instructed to clear proxy authe…9.8
• CVE-2026-90791A vulnerability was detected in GPAC up to f1219cde. This vu…6.3
• CVE-2026-90792A flaw has been found in GPAC up to f1219cde. This issue aff…4.3
• CVE-2026-90793A vulnerability has been found in GPAC up to f1219cde. Impac…5.4
• CVE-2026-90794A vulnerability was found in GPAC up to f1219cde. The affect…6.3
• CVE-2026-90795A vulnerability was determined in itsourcecode Loan Manageme…4.3
• CVE-2026-90796A vulnerability was identified in itsourcecode Leave Managem…6.3