---
id: "CVE-2026-118272"
kind: "vulnerability"
aliases: ["CVE-2026-118272"]
title: "a2ui web renderer error messages expose internal information remotely"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["a2ui", "javascript", "package", "web-renderer"]
not_affected_if: ["renderer-not-used"]
published_at: "2026-10-28T02:17:07+00:00"
first_seen_at: "2026-10-28T02:30:29+00:00"
updated_at: "2026-10-28T02:32:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118272", "first_seen_at": "2026-10-28T02:30:29+00:00"}]
---

# a2ui web renderer error messages expose internal information remotely

The a2ui web renderer's DataContext.dispatchExpressionError function, in renderers/web_core/src/v0_9/rendering/data-context.ts, returns error messages that reveal information when a crafted input is sent. An attacker who can reach the affected renderer can read that disclosed information, but the sources do not describe code execution or data modification.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed a2ui web_core version against the affected range up to `0.10.6`.
- Look for `renderers/web_core/src/v0_9/rendering/data-context.ts` in the deployed source or bundle.
- unknown: the sources do not give a package-manager command for this check.

## Fix

- Apply the patch `8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01` to the a2ui web_core renderer.
- Move to a release newer than `0.10.6` once the sources confirm which version contains the patch.

## Timeline

- 2026-10-28T02:30:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118272

## From the sources

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Error Handler. Performing a manipulation results in information exposure through error message. It is possible to initiate the attack remotely. The exploit is now public and may be used. The patch is named 8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01. It is suggested to install a patch to address this issue.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_