Is CVE-2026-116476 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116476?

CVE-2026-116476 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-116476

Description

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptance.