Is CVE-2026-111761 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-111761 being exploited in the wild.

How severe is CVE-2026-111761?

Medium severity, with a CVSS score of 5.8, published 20 October 2026.

Which products and versions are affected?

A2A Project A2A Java SDK prior to 1.3.0.Final; org.a2aproject.sdk:a2a-java-sdk-server-common (Maven) < 1.3.0.Final, ECOSYSTEM:introduced=0,fixed=1.3.0.Final.

Is there a fix for CVE-2026-111761?

Yes. org.a2aproject.sdk:a2a-java-sdk-server-common (Maven): upgrade to 1.3.0.Final or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-111761 attacked?

It is attacked over the network.

Am I affected by CVE-2026-111761?

Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-server-common (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111761: A2A Java SDK server-common SSRF in push notifications

Q: Is there a fix for CVE-2026-111761?

Yes. org.a2aproject.sdk:a2a-java-sdk-server-common (Maven): upgrade to 1.3.0.Final or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-111761 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-111761?

Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-server-common (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111761 · Severity: medium · CVSS 5.8 · Published 2026-10-20

The A2A Java SDK, a framework for agent-to-agent protocol communication, fails to validate webhook destinations in its push notification system. An unauthenticated attacker can register malicious webhook URLs that cause the server to send requests to internal infrastructure, cloud metadata services, or other restricted networks, potentially exposing sensitive task data or interacting with backend services.

Technologies: A2A Project A2A Java SDK. Vendors: A2A Project, Maven.

Quick answers

Is CVE-2026-111761 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-111761 being exploited in the wild.
How severe is CVE-2026-111761?: Medium severity, with a CVSS score of 5.8, published 20 October 2026.
Which products and versions are affected?: A2A Project A2A Java SDK prior to 1.3.0.Final; org.a2aproject.sdk:a2a-java-sdk-server-common (Maven) < 1.3.0.Final, ECOSYSTEM:introduced=0,fixed=1.3.0.Final.
Is there a fix for CVE-2026-111761?: Yes. org.a2aproject.sdk:a2a-java-sdk-server-common (Maven): upgrade to 1.3.0.Final or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-111761 attacked?: It is attacked over the network.
Am I affected by CVE-2026-111761?: Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-server-common (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

org.a2aproject.sdk:a2a-java-sdk-server-common (Maven): upgrade to 1.3.0.Final or later

# set org.a2aproject.sdk:a2a-java-sdk-server-common to 1.3.0.Final in your pom.xml or build.gradle

Technical details

BasePushNotificationSender in server-common does not validate webhook URLs before storing and using them to deliver task updates, allowing Server-Side Request Forgery (SSRF) to internal, loopback, private, link-local, and cloud-metadata addresses. The vulnerability affects default deployments with push notifications enabled; an unauthenticated caller can register a malicious URL via SendMessage configuration or CreateTaskPushNotificationConfig. HTTP redirect following in JdkA2AHttpClient and VertxA2AHttpClient further enables attackers to bypass creation-time checks via DNS rebinding or redirect-based attacks.

Affected products

A2A Project A2A Java SDK prior to 1.3.0.Final

Identifiers

CVE-2026-111761
GHSA-q78c-5jjq-57g8

Timeline

2026-10-20: disclosed
2026-08-26: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.