CVE-2026-113705

Deferred Deferred - Pending Action

Information Exposure in a2a-rs via Error Messages

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: VulDB

Description

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called 713b943af94ab2d521d483b841618b97a2e78a4d. A patch should be applied to remediate this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-113705

EUVD

EUVD-2026-106872

Affected Vendors & Products

Vendor	Product	Version / Range
a2aproject	a2a-rs	0.4.0
a2aproject	a2a-rs	0.4.1
a2aproject	a2a-rs	0.4.2
a2aproject	a2a-rs	0.4.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

Executive Summary

This vulnerability affects the a2a-rs software up to version 0.4.3. It involves an issue in the a2a-server/src/error.rs file where error messages may expose sensitive information. The attack can be performed remotely, leading to unauthorized information disclosure.

Impact Analysis

An attacker could exploit this flaw to gain access to sensitive data through error messages. This could include internal system details or other confidential information, potentially leading to further attacks or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized information exposure, violating data protection principles in GDPR and HIPAA. Compliance may be compromised if sensitive data is leaked through error messages, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Apply the patch 713b943af94ab2d521d483b841618b97a2e78a4d to remediate the issue in a2a-rs up to 0.4.3.

Hi! I’m here to help you understand CVE-2026-113705. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...