EUVD-2026-105224

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772

A Path Traversal (CWE-22) vulnerability exists in the FileArtifactService of Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 . A remote unauthenticated attacker can use crafted relative or percent-encoded path traversal sequences (e.g., ../ or ..%2F) in the userId or sessionId par...

CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

Google ADK-Python - Unauthenticated Builder Endpoint

Google Agent Development Kit ADK 1.7.0 through 1.28.1 and 2.0.0a1 through 2.0.0a2 on Python OSS, Cloud Run, and GKE contains a code injection and missing authentication vulnerability, letting unauthenticated remote attackers execute arbitrary code on the server, exploit requires no authentication...

adk-tracegauge (>=0.1.0rc1, <=0.2.0), agentic-data-scientist (0.2.3) +17 more potentially affected by CVE-2026-79696 via google-adk (>=2.0.0, <=2.6.3)

google-adk PYPI version =2.0.0, =0.1.0rc1, =0.1.0, =0.3.0, =0.5.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1, =0.8.0, =0.8.0, =1.0.0, =1.6.2 and more Source cves: CVE-2026-79696 Source advisory: MEND:CVE-2026-79696...

CVE-2026-79696

Google Cloud Agent Development Kit (ADK) for Python (versions 2.0.0 through 2.6.0) contains a code injection vulnerability in the adk web component caused by an incomplete standard library denylist . In environments where pytest is installed—on Python (OSS), Cloud Run, and GKE—an unauthenticated ...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

a2a-server (>=0.1.0, <=0.6.1), adk-agui-middleware (>=1.0.0, <=1.5.1) +29 more potentially affected by CVE-2026-79707 via google-adk (>=1.10.0, <=1.19.0)

google-adk PYPI version =1.10.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.0.15, =0.0.28 - automa-ai 0.2.4 and more Source cves: CVE-2026-79707 Source advisory: MEND:CVE-2026-79707...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint of Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 (Python) allows an unauthenticated remote attacker to read arbitrary files by supplying a crafted file_path query parameter. The CVSS 4.0 base score is 8.7 (HIGH) , ref...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

Incorrect Authorization

Overview google-adk is an Agent Development Kit Affected versions of this package are vulnerable to Incorrect Authorization via the request confirmation processing in requestconfirmation.py. An attacker can execute unauthorized tools by injecting or manipulating session-history events to forge a...

agentic-data-scientist (0.2.3), argus-agent (>=0.1.0, <=0.3.0) +17 more potentially affected by CVE-2026-18236 via google-adk (>=2.0.0b1, <=2.3.0)

google-adk PYPI version =2.0.0b1, =0.1.0, =0.3.0, =0.5.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1, =0.8.0, =0.8.0, =1.0.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-18236 Source advisory: SNYK:PYTHON-GOOGLEADK-18426516...

a2a-server (>=0.1.0, <=0.6.1), adk-agui-middleware (>=1.0.0, <=1.5.1) +39 more potentially affected by CVE-2026-18236 via google-adk (>=1.5.0, <=1.37.0)

google-adk PYPI version =1.5.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.0.15, =0.0.28 and more Source cves: CVE-2026-18236 Source advisory: SNYK:PYTHON-GOOGLEADK-18426516...

agentic-data-scientist (0.2.3), argus-agent (>=0.1.0, <=0.3.0) +17 more potentially affected by CVE-2026-18236 via google-adk (>=2.0.0b1, <=2.3.0)

google-adk PYPI version =2.0.0b1, =0.1.0, =0.3.0, =0.5.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1, =0.8.0, =0.8.0, =1.0.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-18236 Source advisory: MEND:CVE-2026-18236...

a2a-server (>=0.1.0, <=0.6.1), adk-agui-middleware (>=1.0.0, <=1.5.1) +38 more potentially affected by CVE-2026-4810 via google-adk (>=1.7.0, <=1.28.0)

google-adk PYPI version =1.7.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.0.15, =0.0.28 and more Source cves: CVE-2026-4810 Source advisory: OSV:PYSEC-2026-344...

OPENSUSE-SU-2026:11044-1 python311-google-adk-2.2.0-1.1 on GA media

These are all security issues fixed in the python311-google-adk-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

a2a-server (>=0.1.0, <=0.6.1), adk-agui-middleware (>=1.0.0, <=1.5.1) +38 more potentially affected by CVE-2026-4810 via google-adk (>=1.7.0, <=1.28.0)

google-adk PYPI version =1.7.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.0.15, =0.0.28 and more Source cves: CVE-2026-4810 Source advisory: GHSA-RG7C-G689-FR3X...