{"id":"CVE-2026-113707","kind":"vulnerability","aliases":["CVE-2026-113707"],"related":[],"title":"a2a-rs agent server: race condition in in-memory task store updates","description":"A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory.rs. The manipulation results in race condition. The attack may be performed from remote. The patch is identified as 7050c7d329238539424ee46440e23b91c4825bee. It is advisable to implement a patch to correct this issue.","summary":"a2a-rs, a Rust implementation of the agent-to-agent protocol, has a race condition in InMemoryTaskStore::update in versions up to 0.4.4. The sources do not describe what an attacker gains beyond the race itself.","severity":"medium","cvss":5.5,"epss":0.00258,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["a2a","agent-server","ai-tooling","rust"],"not_affected_if":["client-only-use"],"how_to_check":"- Check the locked version of `a2a-rs` in Cargo.lock or the Cargo.toml dependency; versions up to `0.4.4` are affected.\n- Check whether the code uses the `a2a-server` crate with the in-memory task store (`InMemoryTaskStore`).","fix":"- Move `a2a-rs` past `0.4.4` to a release that includes commit `7050c7d329238539424ee46440e23b91c4825bee`; the fixed release number is unknown.","status":"open","published_at":"2026-10-21T00:17:49+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T04:12:04+00:00","updated_at":"2026-10-25T04:12:04+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-25T04:12:04Z","model":"claude-haiku-5-5","output":{"fix":"- Move `a2a-rs` past `0.4.4` to a release that includes commit `7050c7d329238539424ee46440e23b91c4825bee`; the fixed release number is unknown.","reach":"network","title":"a2a-rs agent server: race condition in in-memory task store updates","impact":"medium","summary":"a2a-rs, a Rust implementation of the agent-to-agent protocol, has a race condition in InMemoryTaskStore::update in versions up to 0.4.4. The sources do not describe what an attacker gains beyond the race itself.","category":"ai-tooling","nicknames":[],"who_cares":["rust","a2a","agent-server"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Unknown: sources describe only a race condition.","analyst_note":"Find the first fixed a2a-rs release and the exploit impact from the commit 7050c7d329238539424ee46440e23b91c4825bee or the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-113707.","how_to_check":"- Check the locked version of `a2a-rs` in Cargo.lock or the Cargo.toml dependency; versions up to `0.4.4` are affected.\n- Check whether the code uses the `a2a-server` crate with the in-memory task store (`InMemoryTaskStore`).","needs_analyst":true,"not_affected_if":["client-only-use"],"who_is_affected":"Teams that run an a2a-rs server with the in-memory task store and expose it to remote callers are the ones to look at. The sources do not say whether the default configuration is affected or what conditions trigger the race.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001026,"input_tokens":3394,"output_tokens":1374,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113707':17A,20A '-2026':16A,19A '/src/task_store/inmemory.rs':94C '0.4.4':53B,79C '7050c7d329238539424ee46440e23b91c4825bee':113C 'a2a':2A,21B,30B,75C,92C 'a2a-rs':1A,29B,74C 'a2a-server':91C 'a2aproject':73C 'advis':116C 'affect':81C 'agent':4A,23B,38B,40B 'agent-serv':22B 'agent-to-ag':37B 'ai':26B 'ai-tool':25B 'attack':61B,102C 'beyond':63B 'condit':7A,45B,100C 'correct':122C 'cve':15A,18A 'describ':58B 'discov':71C 'element':82C 'file':90C 'flaw':68C 'function':85C 'gain':62B 'identifi':111C 'implement':34B,118C 'in-memori':9A 'inmemorytaskstor':47B,86C 'issu':124C 'manipul':96C 'may':103C 'memori':11A 'patch':109C,120C 'perform':105C 'protocol':41B 'race':6A,44B,65B,99C 'remot':107C 'result':97C 'rs':3A,31B,76C 'rust':28B,33B 'secur':67C 'server':5A,24B,93C 'sourc':55B 'store':13A 'task':12A 'tool':27B 'updat':14A,48B,87C 'version':50B","nicknames":[],"mitigations":[],"who_affected":"Teams that run an a2a-rs server with the in-memory task store and expose it to remote callers are the ones to look at. The sources do not say whether the default configuration is affected or what conditions trigger the race.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T00:17:49+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113707","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113707","severity":null,"published_at":"2026-10-21T00:17:49+00:00","modified_at":"2026-10-21T14:26:26+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-113707","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-113707","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}