{"id":"CVE-2026-118273","kind":"vulnerability","aliases":["CVE-2026-118273"],"related":[],"title":"a2ui: DataModel.set flaw lets remote input exhaust resources","description":"A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possible to launch the attack remotely. The exploit has been published and may be used. This patch is called 82789191ce551f4d7a095d273773fb24bd764c9d. A patch should be applied to remediate this issue.","summary":"The a2ui web renderer's DataModel.set function in renderers/web_core can be manipulated to consume excessive resources. A remote attacker can trigger it, and a public exploit has been published, which can slow or stall the affected renderer.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["a2ui","package","typescript","web-renderer"],"not_affected_if":["patched-version","renderer-not-used"],"how_to_check":"- Check whether your project depends on the a2ui web_core renderer and which version it pins, for example with `npm ls` in the project directory.\n- Check whether the renderers/web_core/src/v0_9/state/data-model.ts file in your copy contains the vulnerable DataModel.set code.","fix":"- Apply patch commit `82789191ce551f4d7a095d273773fb24bd764c9d` from the a2ui-project repository.\n- Move to a release newer than `0.10.6`; the fixed version number is unknown.","status":"open","published_at":"2026-10-28T03:17:12+00:00","first_seen_at":"2026-10-28T03:31:02+00:00","triaged_at":"2026-10-28T03:32:57+00:00","updated_at":"2026-10-28T03:32:57+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-28T03:32:57Z","model":"claude-haiku-5-5","output":{"fix":"- Apply patch commit `82789191ce551f4d7a095d273773fb24bd764c9d` from the a2ui-project repository.\n- Move to a release newer than `0.10.6`; the fixed version number is unknown.","reach":"internet","title":"a2ui: DataModel.set flaw lets remote input exhaust resources","impact":"medium","summary":"The a2ui web renderer's DataModel.set function in renderers/web_core can be manipulated to consume excessive resources. A remote attacker can trigger it, and a public exploit has been published, which can slow or stall the affected renderer.","category":"package","nicknames":[],"who_cares":["a2ui","web-renderer","typescript"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote input can exhaust resources and slow or stall the renderer","analyst_note":"Find the fixed release version and the npm package name for the a2ui web_core renderer, and confirm the attack conditions in the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-118273 and the linked patch commit.","how_to_check":"- Check whether your project depends on the a2ui web_core renderer and which version it pins, for example with `npm ls` in the project directory.\n- Check whether the renderers/web_core/src/v0_9/state/data-model.ts file in your copy contains the vulnerable DataModel.set code.","needs_analyst":true,"not_affected_if":["patched-version","renderer-not-used"],"who_is_affected":"Teams that run the a2ui web renderer (renderers/web_core) in an application that accepts input which reaches DataModel.set, including data sent from remote clients. Projects that do not use this renderer, or that run a version later than 0.10.6 with the patch applied, can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.001078,"input_tokens":3369,"output_tokens":1482,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118273':11A,14A '-2026':10A,13A '0.10.6':70C '82789191ce551f4d7a095d273773fb24bd764c9d':112C 'a2ui':1A,15B,22B,65C,67C 'a2ui-project':64C 'affect':56B,71C 'appli':117C 'attack':39B,97C 'call':111C 'consum':34B 'consumpt':90C 'cve':9A,12A 'datamodel.set':2A,26B,78C 'excess':35B 'execut':83C 'exhaust':7A 'exploit':46B,100C 'file':81C 'flaw':3A,59C 'found':62C 'function':27B,77C 'input':6A 'issu':121C 'launch':95C 'lead':87C 'let':4A 'manipul':32B,85C 'may':105C 'packag':16B 'patch':109C,114C 'possibl':93C 'project':66C 'public':45B 'publish':49B,103C 'remedi':119C 'remot':5A,38B,98C 'render':20B,24B,57B 'renderers/web_core':29B 'renderers/web_core/src/v0_9/state/data-model.ts':82C 'resourc':8A,36B,89C 'slow':52B 'stall':54B 'trigger':41B 'typescript':17B 'use':107C 'vulner':74C 'web':19B,23B 'web-render':18B","nicknames":[],"mitigations":[],"who_affected":"Teams that run the a2ui web renderer (renderers/web_core) in an application that accepts input which reaches DataModel.set, including data sent from remote clients. Projects that do not use this renderer, or that run a version later than 0.10.6 with the patch applied, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T03:17:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118273","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118273","severity":null,"published_at":"2026-10-28T03:17:12+00:00","modified_at":"2026-10-28T03:17:12+00:00","first_seen_at":"2026-10-28T03:31:02+00:00","fetched_at":"2026-10-28T03:31:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}