CVE-2026-116476

EUVD-2026-110071
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptance.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.07%
Common Weakness Enumeration
References
https://github.com/a2aproject/a2a-dotnet/
https://github.com/a2aproject/a2a-dotnet/pull/453
https://vuldb.com/cve/CVE-2026-116476
https://vuldb.com/submit/1014886
https://vuldb.com/vuln/426389
https://vuldb.com/vuln/426389/cti