{"id":"CVE-2026-116476","kind":"vulnerability","aliases":["CVE-2026-116476"],"related":[],"title":"a2a-dotnet: race condition in TaskProjection.ApplyStatus, remotely triggerable","description":"A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptance.","summary":"The a2a-dotnet library (A2A protocol SDK for .NET) up to 1.0.0-preview3 has a race condition in the TaskProjection.ApplyStatus function that a remote manipulation can trigger. The sources do not say what data an attacker can read or change.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["a2a","dotnet","nuget","package"],"not_affected_if":[],"how_to_check":"- Check the version of the `A2A` or `a2a-dotnet` package in your .csproj or packages.lock.json; affected versions are up to `1.0.0-preview3`\n- unknown","fix":"- Move to a version of a2a-dotnet newer than `1.0.0-preview3` once a fix is released; the sources say the fix pull request is still awaiting acceptance\n- unknown","status":"open","published_at":"2026-10-26T19:16:30+00:00","first_seen_at":"2026-10-26T19:32:06+00:00","triaged_at":"2026-10-26T19:33:57+00:00","updated_at":"2026-10-26T19:33:57+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T19:33:57Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version of a2a-dotnet newer than `1.0.0-preview3` once a fix is released; the sources say the fix pull request is still awaiting acceptance\n- unknown","reach":"internet","title":"a2a-dotnet: race condition in TaskProjection.ApplyStatus, remotely triggerable","impact":"medium","summary":"The a2a-dotnet library (A2A protocol SDK for .NET) up to 1.0.0-preview3 has a race condition in the TaskProjection.ApplyStatus function that a remote manipulation can trigger. The sources do not say what data an attacker can read or change.","category":"package","nicknames":[],"who_cares":["dotnet","a2a","nuget"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; race condition may corrupt task state","analyst_note":"Check the NVD entry and the a2aproject/a2a-dotnet repository for the pending fix PR, the exact impact of the race, and which requests reach TaskProjection.ApplyStatus.","how_to_check":"- Check the version of the `A2A` or `a2a-dotnet` package in your .csproj or packages.lock.json; affected versions are up to `1.0.0-preview3`\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that use the a2a-dotnet library in a .NET service that handles A2A task status updates. The sources do not say which configurations or request paths reach TaskProjection.ApplyStatus, so whether a given deployment is exposed is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000623,"input_tokens":3325,"output_tokens":582,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116476':12A,15A '-2026':11A,14A '1.0.0':32B,73C 'a2a':2A,16B,22B,25B,69C 'a2a-dotnet':1A,21B,68C 'a2aproject':67C 'accept':109C 'affect':76C 'attack':56B,95C 'await':108C 'chang':60B 'compon':84C 'condit':5A,37B,93C 'cve':10A,13A 'data':54B 'dotnet':3A,17B,23B,70C 'element':77C 'execut':86C 'fix':105C 'function':41B,80C 'identifi':65C 'issu':107C 'lead':90C 'librari':24B 'manipul':45B,88C 'may':96C 'net':29B 'nuget':18B 'packag':19B 'perform':98C 'preview3':33B,74C 'protocol':26B 'pull':102C 'race':4A,36B,92C 'read':58B 'remot':8A,44B,100C 'request':103C 'say':52B 'sdk':27B 'sourc':49B 'taskproject':85C 'taskprojection.applystatus':7A,40B,81C 'trigger':9A,47B 'weak':62C","nicknames":[],"mitigations":[],"who_affected":"Teams that use the a2a-dotnet library in a .NET service that handles A2A task status updates. The sources do not say which configurations or request paths reach TaskProjection.ApplyStatus, so whether a given deployment is exposed is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T19:16:30+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116476","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116476","severity":null,"published_at":"2026-10-26T19:16:30+00:00","modified_at":"2026-10-26T19:16:30+00:00","first_seen_at":"2026-10-26T19:32:06+00:00","fetched_at":"2026-10-26T19:32:06+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}