---
id: "CVE-2026-120314"
kind: "vulnerability"
aliases: ["CVE-2026-120314"]
title: "Network-AI: A2AServer lets unauthenticated callers run and cancel agent tasks"
severity: "high"
cvss: 7.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["a2a", "agents", "ai-tooling", "network-ai"]
not_affected_if: ["a2aserver-unused", "auth-secret-configured", "version-5.15.5-or-later"]
published_at: "2026-11-02T03:17:29+00:00"
first_seen_at: "2026-11-02T03:31:21+00:00"
updated_at: "2026-11-02T03:31:54+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120314", "first_seen_at": "2026-11-02T03:31:21+00:00"}]
---

# Network-AI: A2AServer lets unauthenticated callers run and cancel agent tasks

Network-AI versions 5.14.0 before 5.15.5 have an A2AServer class that skips authentication when no secret is configured. An unauthenticated attacker can send JSON-RPC requests to tasks/send, tasks/get and tasks/cancel to run tasks, read their results and cancel them.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Network-AI version and confirm it is below `5.15.5`.
- Look for use of the A2AServer class in your code or configuration.
- Check whether a secret (Bearer token) is configured for the A2AServer; if none is set, the server is open.

## Fix

- Network-AI: move to `5.15.5` or later.

## Timeline

- 2026-11-02T03:31:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120314

## From the sources

Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows unauthenticated attackers to access task operations when no secret is configured. Attackers can send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel without a Bearer token to execute tasks, read results, and cancel tasks.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_