Is CVE-2026-111763 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-111763 being exploited in the wild.

How severe is CVE-2026-111763?

Medium severity, with a CVSS score of 4, published 20 October 2026.

Which products and versions are affected?

A2A Project A2A Java SDK before 1.3.0.Final; org.a2aproject.sdk:a2a-java-sdk-parent (Maven) < 1.3.0.Final, ECOSYSTEM:introduced=0,fixed=1.3.0.Final.

How is CVE-2026-111763 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-111763?

Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-parent (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111763: A2A Java SDK credential leakage via header injection and redirects

Q: Is there a fix for CVE-2026-111763?

Yes. org.a2aproject.sdk:a2a-java-sdk-parent (Maven): upgrade to 1.3.0.Final or later. Until then: Upgrade to version 1.3.0.Final or later, which adds safe header allowlist validation to AuthInterceptor and disables automatic HTTP redirects in all HTTP clients. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-111763 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-111763?

Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-parent (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111763 · Severity: medium · CVSS 4 · Published 2026-10-20

The A2A Java SDK is a library that enables secure agent-to-agent communication using configured API credentials. A malicious or compromised remote agent can trick the client into leaking API keys to a third-party server by injecting custom HTTP headers and exploiting automatic redirect handling. An attacker with control of an agent's configuration can intercept credentials meant for legitimate servers.

Technologies: A2A Project A2A Java SDK. Vendors: A2A Project, Maven.

Quick answers

Is CVE-2026-111763 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-111763 being exploited in the wild.
How severe is CVE-2026-111763?: Medium severity, with a CVSS score of 4, published 20 October 2026.
Which products and versions are affected?: A2A Project A2A Java SDK before 1.3.0.Final; org.a2aproject.sdk:a2a-java-sdk-parent (Maven) < 1.3.0.Final, ECOSYSTEM:introduced=0,fixed=1.3.0.Final.
Is there a fix for CVE-2026-111763?: Yes. org.a2aproject.sdk:a2a-java-sdk-parent (Maven): upgrade to 1.3.0.Final or later. Until then: Upgrade to version 1.3.0.Final or later, which adds safe header allowlist validation to AuthInterceptor and disables automatic HTTP redirects in all HTTP clients. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-111763 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-111763?: Check whether you run A2A Project A2A Java SDK or org.a2aproject.sdk:a2a-java-sdk-parent (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

org.a2aproject.sdk:a2a-java-sdk-parent (Maven): upgrade to 1.3.0.Final or later

# set org.a2aproject.sdk:a2a-java-sdk-parent to 1.3.0.Final in your pom.xml or build.gradle

Upgrade to version 1.3.0.Final or later, which adds safe header allowlist validation to AuthInterceptor and disables automatic HTTP redirects in all HTTP clients.

Technical details

The AuthInterceptor uses the remote agent's declared header name from APIKeySecurityScheme without validating that credentials are actually configured for HEADER-based transmission, allowing header injection. The JdkA2AHttpClient's NORMAL redirect policy forwards credential-bearing headers across cross-origin redirects controlled by the agent. The attack requires the client to have configured API key credentials and the attacker to control the agent's AgentCard and redirect responses.

Affected products

A2A Project A2A Java SDK before 1.3.0.Final

Identifiers

CVE-2026-111763
GHSA-9rhm-2h4x-jwmx

Timeline

2026-10-20: disclosed
2026-08-26: patched: Fix committed and merged

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.