# CVE-2026-118272: a2ui information exposure through error messages

Source: https://junglewise.ai/threats/cve-2026-118272-a-vulnerability-was-detected-in-a2ui-project-a2ui-up-to-0-10-6  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118272 · Severity: medium · CVSS 4.3 · Published 2026-10-28

a2ui is a UI framework used to build web applications. When unhandled runtime errors occur during expression evaluation, the error handler exposes sensitive stack traces containing internal filesystem paths and directory structures to all subscribers. An attacker can trigger expression errors remotely to extract internal system information without authentication.

Technologies: [A2ui-Project A2ui](https://junglewise.ai/threats/technologies/a2ui-project-a2ui). Vendors: [A2ui-Project](https://junglewise.ai/threats/vendors/a2ui-project).

## Quick answers

**Is CVE-2026-118272 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118272 being exploited in the wild.

**How severe is CVE-2026-118272?** Medium severity, with a CVSS score of 4.3, published 28 October 2026.

**Which products and versions are affected?** A2ui-Project A2ui up to 0.10.6.

**Is there a fix for CVE-2026-118272?** Yes: fixed in Fixed in commit 8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01 (version not specified in advisory). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-118272 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-118272?** Check whether you run A2ui-Project A2ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Fixed in commit 8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01 (version not specified in advisory)

## Technical details

The DataContext.dispatchExpressionError function in renderers/web_core/src/v0_9/rendering/data-context.ts fails to sanitize V8 stack traces before broadcasting error events through the surface.onError mechanism (CWE-209: Sensitive Information Disclosure). Attacker-controlled input can trigger runtime errors during expression evaluation, causing the raw stack trace—including filesystem paths and SDK line numbers—to be disclosed to all error subscribers. The vulnerability requires network access to send requests triggering expression evaluation, with no authentication needed.

## Affected products

- a2ui-project a2ui up to 0.10.6

## Timeline

- 2026-10-28: disclosed

## References

- [https://github.com/a2ui-project/a2ui/](https://github.com/a2ui-project/a2ui/)
- [https://github.com/a2ui-project/a2ui/commit/8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01](https://github.com/a2ui-project/a2ui/commit/8f149a1c7b0ce1fa8e93ac3adfa5fda960faeb01)

## Related threats

- [a2ui legacy Lit renderer uncontrolled property injection](https://junglewise.ai/threats/cve-2026-118538-a-vulnerability-was-determined-in-a2ui-project-a2ui-up-to-0-12-0)
- [a2ui improper input validation in media components URL](https://junglewise.ai/threats/cve-2026-118537-a-vulnerability-was-found-in-a2ui-up-to-0-10-4-this)
- [a2ui uncontrolled recursion in DynamicValue resolver](https://junglewise.ai/threats/cve-2026-118275-a-vulnerability-was-found-in-a2ui-project-a2ui-up-to-0-10-6-this)
- [a2ui generic-binder resource consumption via unbounded child list](https://junglewise.ai/threats/cve-2026-118274-a-vulnerability-has-been-found-in-a2ui-project-a2ui-up-to-0-10-6)
- [a2ui DataModel.set resource consumption via unbounded array indices](https://junglewise.ai/threats/cve-2026-118273-a-flaw-has-been-found-in-a2ui-project-a2ui-up-to-0-10-6-affected)