CVE-2026-120314 Details

A missing authentication vulnerability has been identified in the Network-AI package, specifically in versions 5.14.0 prior to 5.15.5. The issue resides in the A2AServer class, which exposes task operations over HTTP without proper authentication when no secret is configured. This vulnerability allows unauthenticated attackers to send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel, enabling them to execute tasks, retrieve results, and cancel tasks. The vulnerability arises because the Bearer authentication is only enforced when a secret is explicitly provided, and the server defaults to running without authentication.

To address this vulnerability, the A2A server should be configured to require a non-empty secret before allowing task operations. This can be achieved by modifying the startServer() method to reject startup when no secret is provided, or by making the secret a mandatory option. Additionally, the authentication check should be applied unconditionally to task routes, and any unauthenticated mode for local development should require explicit opt-in and include a warning when binding to a non-loopback address.