{"id":"CVE-2026-118128","kind":"vulnerability","aliases":["CVE-2026-118128"],"related":[],"title":"a2a-js: race condition in task status updates before 1.2.0","description":"A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result_manager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading to version 1.2.0 is recommended to address this issue. The name of the patch is 7b87c9480bfa643f9d2b2eaf06988b3d3a95de25. It is recommended to upgrade the affected component.","summary":"The a2a-js library's ResultManager.applyStatusUpdate function in src/server/result_manager.ts has a race condition when handling task status updates. The sources do not say what an attacker can gain beyond disturbing task state.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["a2a-js","agent-to-agent","node","package"],"not_affected_if":[],"how_to_check":"- Check the installed a2a-js version in the project with `npm ls @a2a-js/sdk` or by reading the lockfile, and look for versions up to `1.1.0`.","fix":"- Upgrade a2a-js to `1.2.0` or later, per the sources (patch commit 7b87c9480bfa643f9d2b2eaf06988b3d3a95de25).","status":"open","published_at":"2026-10-27T23:16:58+00:00","first_seen_at":"2026-10-27T23:29:42+00:00","triaged_at":"2026-10-27T23:31:19+00:00","updated_at":"2026-10-27T23:31:19+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-27T23:31:19Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade a2a-js to `1.2.0` or later, per the sources (patch commit 7b87c9480bfa643f9d2b2eaf06988b3d3a95de25).","reach":"internet","title":"a2a-js: race condition in task status updates before 1.2.0","impact":"medium","summary":"The a2a-js library's ResultManager.applyStatusUpdate function in src/server/result_manager.ts has a race condition when handling task status updates. The sources do not say what an attacker can gain beyond disturbing task state.","category":"package","nicknames":[],"who_cares":["a2a-js","node","agent-to-agent"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; race condition may corrupt task status state","analyst_note":"Check the NVD entry and the a2a-js 1.2.0 release notes to confirm the attack's concrete effect and whether the exploit is public.","how_to_check":"- Check the installed a2a-js version in the project with `npm ls @a2a-js/sdk` or by reading the lockfile, and look for versions up to `1.1.0`.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running a server built on a2a-js 1.1.0 or earlier that handles task status updates from remote clients. Applications that only use the library as a client, or that do not run the affected server handler, are less likely to be exposed, but the sources do not confirm this. The sources do not say which deployment shapes are most at risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000616,"input_tokens":3387,"output_tokens":554,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118128':14A,17A '-2026':13A,16A '1.1.0':72C '1.2.0':11A,104C '7b87c9480bfa643f9d2b2eaf06988b3d3a95de25':117C 'a2a':2A,19B,29B,68C 'a2a-js':1A,18B,28B,67C 'a2aproject':66C 'address':108C 'affect':124C 'agent':22B,24B 'agent-to-ag':21B 'attack':53B,96C 'beyond':56B 'compon':84C,125C 'condit':5A,40B,94C 'cve':12A,15A 'disturb':57B 'file':80C 'found':64C 'function':34B,76C 'gain':55B 'handl':42B 'handler':88C 'impact':73C 'issu':110C 'js':3A,20B,30B,69C 'launch':99C 'lead':91C 'librari':31B 'manipul':90C 'may':97C 'name':112C 'node':25B 'packag':26B 'patch':115C 'race':4A,39B,93C 'recommend':106C,120C 'remot':100C 'resultmanager.applystatusupdate':33B,77C 'say':50B 'sourc':47B 'src/server/result_manager.ts':36B,81C 'state':59B 'status':8A,44B,86C 'task':7A,43B,58B,85C 'updat':9A,45B,87C 'upgrad':101C,122C 'version':103C 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Teams running a server built on a2a-js 1.1.0 or earlier that handles task status updates from remote clients. Applications that only use the library as a client, or that do not run the affected server handler, are less likely to be exposed, but the sources do not confirm this. The sources do not say which deployment shapes are most at risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T23:16:58+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118128","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118128","severity":null,"published_at":"2026-10-27T23:16:58+00:00","modified_at":"2026-10-27T23:16:58+00:00","first_seen_at":"2026-10-27T23:29:42+00:00","fetched_at":"2026-10-27T23:29:42+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}