OASB
Attacks/A2A Attack/A2A-004
CRITICALCWE-287

A2A-004 A2A Identity Spoofing: Orchestrator

A2A Attack: Attempts to exploit agent-to-agent messaging (identity spoofing, delegation abuse)

Description

Claims to be the orchestrator to control workers

Remediation

Require cryptographic proof of orchestrator identity. Never disable security based on message claims.

Severity

CRITICAL

OASB Control

5.1

CWE

CWE-287
PreviousA2A-003 A2A Identity Spoofing: AdminNextA2A-005 A2A Delegation Abuse: Elevated Privileges