PatchTheCVECVE-2026-10032: The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without valida
22
Routine
MEDIUM 6.1UPGRADE
CVE-2026-10032 is a medium-severity flaw (CVSS 6.1) affecting a2ui\/web core. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.1 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.1% (top 98%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2026-08-04 |
| Last modified | 2026-10-23 |
Publisher (CNA): Google Inc. · Vendor: google
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
google a2ui\/web core UPGRADE
Affected: >= 0.9.0 and < 0.10.2
Fixed in: 0.10.2
Safe to downgrade to: a release before 0.9.0
1. Check installed version
npm ls a2uiweb-core
2. UPGRADE to 0.10.2
npm install a2uiweb-core@">=0.10.2"
3. If no update is available yet, DOWNGRADE to a release before 0.9.0
npm view a2uiweb-core versions
npm install a2uiweb-core@"<0.9.0"
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.