CVE-2026-111763: A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect
Impact.* A malicious or compromised A2A agent can cause the client’s API key credential to be forwarded to an arbitrary third-party server. The agent serves an AgentCard with an APIKeySecurityScheme specifying a custom header name, then responds with an HTTP redirect. The JDK HttpClient follows the redirect and forwards the custom header containing the credential, since only the standard Authorization header may be stripped on cross-origin redirects.
References
- github.com/a2aproject/a2a-java/commit/2a36530d75e11bcf9b81f543464dbe193ca6478e
- github.com/a2aproject/a2a-java/pull/1097
- github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final
- github.com/a2aproject/a2a-java/security/advisories/GHSA-4fpj-g9jf-9rgg
- github.com/a2aproject/a2a-java/security/advisories/GHSA-9rhm-2h4x-jwmx
- github.com/advisories/GHSA-9rhm-2h4x-jwmx
- nvd.nist.gov/vuln/detail/CVE-2026-111763
Code Behaviors & Features
Detect and mitigate CVE-2026-111763 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →