Medium severity6.1NVD Advisory· Published Aug 4, 2026· Updated Sep 23, 2026
CVE-2026-10032
CVE-2026-10032
Description
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is required; the Basic Catalog is enabled by default.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@a2ui/web_corenpm | >= 0.9.0, < 0.10.2 | 0.10.2 |
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
5- github.com/a2ui-project/a2ui/security/advisories/GHSA-72qq-p3r5-f7wqnvdVendor AdvisoryWEB
- github.com/advisories/GHSA-72qq-p3r5-f7wqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-10032ghsaADVISORY
- github.com/a2ui-project/a2ui/commit/71573078c4168b2dc166bb847c3a85715dadc675ghsaWEB
- github.com/a2ui-project/a2ui/pull/1707ghsaWEB
News mentions
0No linked articles in our index yet.