September 2026Unreviewed
A2ABreak: Systematic Security Analysis of the A2A Protocol
Alireza Lotfi, Mirza Masfiqur Rahman, Imtiaz Karim, Elisa Bertino
Abstract
The Agent2Agent (A2A) protocol, now governed by the Linux Foundation, is an open standard that enables autonomous AI agents to discover, authenticate with, and delegate tasks to one another across organizational boundaries. Designed to complement the Model Context Protocol (MCP) for tool integration, A2A is rapidly emerging as the horizontal communication layer of the multi-agent ecosystem. Yet the protocol's security has received no systematic analysis. This paper presents A2ABreak, the first r
Categories
Cite
@misc{lotfi2026a2abreak,
title = {{A2ABreak: Systematic Security Analysis of the A2A Protocol}},
author = {Alireza Lotfi and Mirza Masfiqur Rahman and Imtiaz Karim and Elisa Bertino},
year = {2026},
month = sep,
eprint = {2609.10871},
archivePrefix = {arXiv},
url = {https://arxiv.org/abs/2609.10871}
}