Skip to content
Threat Feed

Tag

A2a

1 brief RSS
critical advisory

PraisonAI A2A Server Example Unauthenticated Remote Code Execution

The PraisonAI A2A server example is vulnerable to remote code execution due to a combination of factors: the example exposes an A2A server without authentication, binds to 0.0.0.0, and registers a `calculate` tool implemented with Python `eval(expression)`.

A2A server example a2a praisonai rce eval
2r 1t