What is CVE-2026-92217?

CVE-2026-92217 is a medium-severity vulnerability in A2ui-Project A2ui, classified under Improper Control of Dynamically-Managed Code Resources. CVSS score: 6.3/10. Published 2026-09-16.

How severe is CVE-2026-92217?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in A2ui-Project A2ui

CVE-2026-92217

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts of the component Message Parsing. This manipulation causes dynamically-determined object attributes. The attack can be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

A2ui-project A2ui — versions 0.10.0, 0.10.1, 0.10.2

Weakness classification (CWE)

References

cna@vuldb.com (product)
cna@vuldb.com (issue-tracking)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)

Frequently asked questions

What is CVE-2026-92217?: CVE-2026-92217 is a medium-severity vulnerability in A2ui-Project A2ui, classified under Improper Control of Dynamically-Managed Code Resources. CVSS score: 6.3/10. Published 2026-09-16.
How severe is CVE-2026-92217?: Medium severity. CVSS v3 base score is 6.3 out of 10.