{"id":"CVE-2026-118538","kind":"vulnerability","aliases":["CVE-2026-118538"],"related":[],"title":"a2ui: renderer flaw lets remote input control dynamically determined object attributes","description":"A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.","summary":"In a2ui up to 0.12.0, the Root.renderComponentTree function in the 0.8 renderer lets crafted input manipulate dynamically determined object attributes. The sources do not say what an attacker can reach beyond that, and the fix is only a pending pull request.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["a2ui","javascript","package"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-28T22:17:12+00:00","first_seen_at":"2026-10-28T22:35:34+00:00","triaged_at":"2026-10-28T22:36:55+00:00","updated_at":"2026-10-28T22:36:55+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-28T22:36:55Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"a2ui: renderer flaw lets remote input control dynamically determined object attributes","impact":"medium","summary":"In a2ui up to 0.12.0, the Root.renderComponentTree function in the 0.8 renderer lets crafted input manipulate dynamically determined object attributes. The sources do not say what an attacker can reach beyond that, and the fix is only a pending pull request.","category":"package","nicknames":[],"who_cares":["a2ui","javascript"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; sources only describe attribute manipulation","analyst_note":"Check the NVD entry and the a2ui project repository for the upstream fix commit, the affected versions and whether the renderer is reachable with untrusted input.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000515,"input_tokens":3330,"output_tokens":364,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118538':14A,17A '-2026':13A,16A '0.12.0':25B,73C '0.8':31B 'a2ui':1A,18B,22B,68C,70C 'a2ui-project':67C 'accept':113C 'affect':76C 'attack':48B,100C 'attribut':11A,40B,98C 'await':112C 'beyond':51B 'compon':86C 'control':7A 'craft':34B 'cve':12A,15A 'determin':9A,38B,65C,96C 'dynam':8A,37B,95C 'dynamically-determin':94C 'execut':88C 'file':82C 'fix':55B,109C 'flaw':3A 'function':28B,78C 'input':6A,35B 'issu':75C,111C 'javascript':19B 'launch':103C 'lead':92C 'let':4A,33B 'manipul':36B,90C 'may':101C 'object':10A,39B,97C 'packag':20B 'pend':59B 'project':69C 'pull':60B,106C 'reach':50B 'remot':5A,104C 'render':2A,32B,87C 'request':61B,107C 'root.rendercomponenttree':27B,79C 'say':45B 'sourc':42B 'src/0.8/ui/root.js':83C 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T22:17:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118538","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118538","severity":null,"published_at":"2026-10-28T22:17:12+00:00","modified_at":"2026-10-28T22:17:12+00:00","first_seen_at":"2026-10-28T22:35:34+00:00","fetched_at":"2026-10-28T22:35:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}