CVE-2026-111761: A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery
An unauthenticated attacker can coerce the a2a-java server into issuing HTTP requests to arbitrary internal and cloud-metadata endpoints from the server’s own network position — a Server-Side Request Forgery reachable in the default deployment with no credentials, no user interaction, and a single request. The behaviour is the shipped default, not a misconfiguration.
References
- github.com/a2aproject/a2a-java/commit/b855b2ae37e4bf23f73e7746ce166fbc5a0b8b5b
- github.com/a2aproject/a2a-java/pull/1096
- github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final
- github.com/a2aproject/a2a-java/security/advisories/GHSA-q78c-5jjq-57g8
- github.com/advisories/GHSA-q78c-5jjq-57g8
- nvd.nist.gov/vuln/detail/CVE-2026-111761
Code Behaviors & Features
Detect and mitigate CVE-2026-111761 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →