Description
The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component’s functionCall action.
Recommendation
Update the @a2ui/web_core package to the latest compatible version. Followings are version details:
- Affected version(s): >= 0.9.0, < 0.10.2
- Patched version(s): 0.10.2
References
Could your website be exposed too?
SmartScanner can check your website for @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified - CVE-2026-69255
- Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader - CVE-2026-53597
- HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft - CVE-2026-46496
- ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass - CVE-2026-84371
You might also like:
See something that needs correcting? Let us knowUpdated October 02, 2026