What’s Vulnerable › Vulnerabilities
CVE-2026-10032: Arbitrary JavaScript Execution via openUrl in @a2ui/web_core
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-04 · updated 2026-10-23
- Weakness: CWE-79
Description
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is required; the Basic Catalog is enabled by default.
Affected products
- Google @a2ui/web_core: from 0.9.0 before 0.10.2 — fixed in 0.10.2
How to fix
Upgrade to a fixed version: Google @a2ui/web_core 0.10.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-10032 or the next vulnerability affects your stack