Medium severity4.3NVD Advisory· Published Oct 28, 2026

CVE-2026-118273

Description

A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possible to launch the attack remotely. The exploit has been published and may be used. This patch is called 82789191ce551f4d7a095d273773fb24bd764c9d. A patch should be applied to remediate this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

A2ui Project/A2uillm-fuzzy
Range: <=0.10.6

Patches

Vulnerability mechanics

References

github.com/a2ui-project/a2ui/commit/82789191ce551f4d7a095d273773fb24bd764c9dnvd
github.com/a2ui-project/a2ui/issues/2386nvd
github.com/a2ui-project/a2ui/pull/2430nvd
vuldb.com/cve/CVE-2026-118273nvd
vuldb.com/submit/1015117nvd
vuldb.com/vuln/427571nvd
vuldb.com/vuln/427571/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000