Cairn

A2A callback SSRF bypass and address validation fixes

NousResearch/hermes-agent · cluster 126755 · agent

Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These members concern a security vulnerability in A2A push-callback handling where SSRF protections can be bypassed via DNS names, non-standard IPv4 representations, or HTTP redirects. The group includes the issue report and associated fixes to strengthen callback origin and address validation.

Open issues1

  • Issue#126755[Security] A2A push-callback SSRF guard is bypassable by DNS names, integer-form IPv4, and HTTP redirects

Open PRs2

  • PR#126814fix(a2a): reject internal callback addresses in every spelling
  • PR#129793fix(a2a): keep callback delivery on validated origins
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/126755.json
cluster/126755.md