medium5.4
CVE-2026-116476
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3.
Impact
A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptance.
Affected products
| Product | Affected versions |
|---|---|
| A2aproject A2a-Dotnet | before 1.0.0-preview3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.