ZDF
Sign inSign up

Vulnerabilities

Security fix · CVE-2026-111764

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol.

Published Oct 20, 2026 · catalog updated Oct 20, 2026 · A2A Java SDK is

Last checked Nov 7, 2026. A connected source was read within the last 7 days.

Check if you run it

No confirmed exploitation is on record for CVE-2026-111764. EPSS is 0.60%. Act only if a listed version of A2A Java SDK is is installed.

Gaps on this record

  • The stored product name is a package slug. The name on this page is taken from the title (A2A Java SDK is).
  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
High7.5
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.60%
Remediation
Version ranges on file
Affected products
Maven org.a2aproject.sdk:a2a-java-sdk-server-common · maven org.a2aproject.sdk:a2a-java-sdk-server-common

Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships._ --- - **Ecosystem:** Maven - **Affected package:** (task store / authorization) - **Affected versions:** (and on prior to the fix) - **Patched version:** _(the release that carries the fix, e.g. 1.2.1.Final)_ - **CWE:** CWE-1188 (Insecure Default Initialization), CWE-862 (Missing Authorization) - **Severity:** High - **CVSS v3.1:** (7.5, High) --- ## Details The default task store performs no authorization on task reads. 's no-arg constructor sets , and is a bare map lookup with no authorization check regardless of provider: Authorization is enforced only when the application both supplies a *and* routes requests through (via CDI), which checks ownership before delegating. A server that uses the default store, or wires manually, or integrates through a non-CDI stack (e.g. Spring), never reaches that check. The safe posture is therefore opt-in and the shipped default is the unsafe one. A caller can read a task created by another caller simply by knowing or guessing its id. ## Summary With the SDK's default configuration, task reads are not authorized: any caller can retrieve a task (including its status, context, message history, and artifacts) created by another caller, by supplying the task id. ## PoC Using only the real production classes wired the default way (no mocks): 1. Construct the default store: (no-arg constructor, so no authorization provider). 2. As one caller, save a task: with id . 3. As a second, unrelated caller with no auth context, read it back: . The second caller receives the first caller's task in full, with no authorization check: Verified on (commit , JDK 21) and reproduces unchanged on . ## Impact Task data crosses caller boundaries with no authorization. In any multi-caller deployment built on the default wiring, one caller can enumer

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • Maven org.a2aproject.sdk:a2a-java-sdk-server-common0 → 1.3.0.Final
  • maven org.a2aproject.sdk:a2a-java-sdk-server-common< 1.3.0.Final

How to fix CVE-2026-111764

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-111764. EPSS is 0.60%. Act only if a listed version of A2A Java SDK is is installed.

Which versions are affected?

Compare what you have installed with 0 → 1.3.0.Final, < 1.3.0.Final. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

CWE-1188; CWE-862: Missing Authorization. EPSS 0.60%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 20, 2026 · NIST NVD

    Detected

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String taskId) returns the stored task without checking the caller or owner. Authorization depends on supplying a TaskAuthorizati

  2. Oct 20, 2026 · NIST NVD

    Updated

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String taskId) returns the stored task without checking the caller or owner. Authorization depends on supplying a TaskAuthorizati

  3. Oct 20, 2026 · NIST NVD

    Updated

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String taskId) returns the stored task without checking the caller or owner. Authorization depends on supplying a TaskAuthorizati

  4. Oct 20, 2026 · GitHub Advisory Database

    Fix available

    org.a2aproject.sdk:a2a-java-sdk-server-common fixed in 1.3.0.Final

  5. Oct 20, 2026 · GitHub Advisory Database

    Fix available

    org.a2aproject.sdk:a2a-java-sdk-server-common fixed in 1.3.0.Final

  6. Oct 20, 2026 · GitHub Advisory Database

    Updated

    Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships._ --- - **Ecosystem:** Maven - **Affected package:** (task store / authorization) - **Affected versions:** (and on prior to the fix) - **Patched version:** _(the release that carries the fix,

Sources

  • CVE.orgVulnerability recordCVE-2026-111764

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-111764

    30-day exploitation probability 0.60%

    first.org
  • GitHub Advisory DatabasePackage advisoryGHSA-qw47-mcm5-934w

    GitHub Advisory Database record mirrored by OSV.

    github.com
  • NIST NVDVulnerability recordCVE-2026-111764

    A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String ta

    nvd.nist.gov
  • OpenSSF OSV / OSV ScannerPackage advisoryGHSA-qw47-mcm5-934w

    A2A Java SDK has a fail-open default task authorization

    osv.dev

References

Freshness

Last verified in this catalog Nov 7, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.

  • GitHub Advisory DatabaseOct 23, 2026
  • OpenSSF OSV / OSV ScannerOct 23, 2026
  • FIRST EPSSOct 23, 2026
  • CVE.orgOct 21, 2026
  • NIST NVDOct 21, 2026