Read the docs
TI-2026-76848 Aliases CVE-2026-111762GHSA-x32g-jvvm-4725

A2A Java SDK logs push notification credentials in cleartext

Priority LOW 25CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-532.

Summary

Before version 1.3.0.Final, the A2A Java SDK logs the request body at SEVERE level when protobuf parsing fails in RestHandler.parseRequestBody. With push notifications enabled, the token and authentication.credentials fields of push config requests can hold bearer tokens. A valid JSON body that fails protobuf deserialization, such as one with an unknown field, writes those secrets to the logs. An attacker who reads the logs can recover them and possibly forge task status updates to the client's push endpoint.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/transport/rest/handler/RestHandler.java` logs the entire JSON request body at SEVERE level when JsonFormat.parser().merge() throws InvalidProtocolBufferException. With push notifications enabled, createTaskPushNotificationConfiguration reaches this parser for requests to `/v1/tenants/{tenant}/tasks/{taskId}/pushNotificationConfigs`, whose token and authentication.credentials fields can contain bearer tokens and authentication credentials for client push endpoints. A valid JSON body that fails protobuf deserialization, including an unknown field under strict parsing or a schema mismatch, causes those secrets to be written to the server logs in cleartext. An attacker with access to the server logs or a log aggregation system can retrieve the credentials and potentially use the credentials to send forged task status updates to the client's push notification endpoint. This issue is fixed in version 1.3.0.Final.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00174 6th percentileScored 2026-11-07
Fix Fixed a2a-java (a2aproject): 1.3.0.Finalorg.a2aproject.sdk:a2a-java-sdk-transport-rest (Maven): 1.3.0.Final

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
a2aprojecta2a-javabefore 1.3.0.Final1.3.0.FinalPatch availableCNA
—org.a2aproject.sdk:a2a-java-sdk-transport-rest (Maven)before 1.3.0.Final1.3.0.FinalPatch availableGHSA-x32g-jvvm-4725
  • a2a-java Vendora2aproject Affected before 1.3.0.Final Fixed in 1.3.0.Final Patch available CNA
  • org.a2aproject.sdk:a2a-java-sdk-transport-rest (Maven) Vendor— Affected before 1.3.0.Final Fixed in 1.3.0.Final Patch available GHSA-x32g-jvvm-4725

Remediation

Upgrade the org.a2aproject.sdk:a2a-java-sdk-transport-rest Maven package to 1.3.0.Final or later.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA a2a-java (a2aproject) Fixed in 1.3.0.Final
  • Fix · GHSA-x32g-jvvm-4725 org.a2aproject.sdk:a2a-java-sdk-transport-rest (Maven) Fixed in 1.3.0.Final Advisory →

Timeline

  1. 2026-10-20 Threatist record created from CVE-2026-111762
  2. 2026-10-21 Alias added: GHSA-x32g-jvvm-4725
  3. 2026-10-21 Fix available: Maven/org.a2aproject.sdk:[email protected] · GHSA-x32g-jvvm-4725
  4. 2026-10-21 CVSS score added · GHSA-x32g-jvvm-4725
  5. 2026-10-21 Weakness changed · GHSA-x32g-jvvm-4725
  6. 2026-10-21 5 new references · GHSA-x32g-jvvm-4725
  7. 2026-10-22 Priority changed: MEDIUM → LOW
  8. 2026-10-28 CISA SSVC decision points changed

References

Advisory 1

Other 4

  • TI-2026-76905 Android A2A Java SDK forwards API keys across redirects CVSS 3.1HIGH 7.5
  • TI-2026-76904 A2A Java SDK default task store skips authorization on task reads CVSS 3.1HIGH 7.5
  • TI-2026-76847 Server-side request forgery in A2A Java SDK push notifications CVSS 3.1MEDIUM 5.8
  • TI-2026-81183 Resource consumption in a2aproject a2a-go REST SSE handler CVSS 4.0MEDIUM 6.9
  • TI-2026-61722 HTTP response splitting in a2aproject a2a-java CVSS 4.0MEDIUM 6.9
  • TI-2026-81185 Denial of service in a2aproject a2a-go Distributed Manager Cancel CVSS 4.0MEDIUM 6.9
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences