OASB
Attacks/A2A Attack/A2A-006
CRITICALCWE-269

A2A-006 A2A Delegation Abuse: Cross-boundary

A2A Attack: Attempts to exploit agent-to-agent messaging (identity spoofing, delegation abuse)

Description

Attempts to delegate tasks outside authorized scope

Remediation

Validate delegation targets against allowlist. Block delegation to external URLs.

Severity

CRITICAL

OASB Control

5.2

CWE

CWE-269
PreviousA2A-005 A2A Delegation Abuse: Elevated PrivilegesNextA2A-007 A2A Embedded Prompt Injection