A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument current[segment] leads to information disclosure.
The attack may be initiated remotely. The identifier of the patch is 1b3bff234661ce922cbc3771be642b23ec9fd0fa. To fix this issue, it is recommended to deploy a patch.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
a2ui-project:a2ui
References 8
https://github.com/a2ui-project/a2ui/
cna@vuldb.com
https://github.com/a2ui-project/a2ui/commit/1b3bff234661ce922cbc3771be642b23ec9…
cna@vuldb.com
https://github.com/a2ui-project/a2ui/issues/2299
cna@vuldb.com
https://github.com/a2ui-project/a2ui/pull/2355
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-92357
cna@vuldb.com
https://vuldb.com/submit/934118
cna@vuldb.com
https://vuldb.com/vuln/405444
cna@vuldb.com
https://vuldb.com/vuln/405444/cti
cna@vuldb.com