Critical XSS via window.open() in @a2ui/web_core openUrl
CVE-2026-10032 Published on August 4, 2026
Arbitrary JavaScript Execution via openUrl in @a2ui/web_core
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitrary JavaScript executes in the victim application's browser origin, constituting a stored/reflected XSS with Critical severity. No non-default configuration is required; the Basic Catalog is enabled by default.
Vulnerability Analysis
CVE-2026-10032 is exploitable with network access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2026-10032 has been classified to as a XSS vulnerability or weakness.
Affected Versions
Google @a2ui/web_core:- Version 0.9.0 is affected.
- Version 0.9.1-alpha.0 is affected.
- Version 0.9.1-alpha.1 is affected.
- Version 0.9.1-alpha.2 is affected.
- Version 0.9.1-alpha.3 is affected.
- Version 0.9.1-alpha.4 is affected.
- Version 0.9.1-alpha.5 is affected.
- Version 0.9.1 is affected.
- Version 0.9.2 is affected.
- Version 0.10.0 is affected.
- Version 0.10.1 is affected.