44 matches found
@holocronlab/botruntime-adk (2.6.1), @holocronlab/brt (0.9.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.1)
@holocronlab/botruntime-runtime NPM version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.1 - @holocronlab/brt 0.9.5 Source cves: unknown CVE Source advisory...
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Google deleted three AI agent workflows from its Agent Development Kit ADK Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt-injected into posti...
Incorrect Authorization
Overview google-adk is an Agent Development Kit Affected versions of this package are vulnerable to Incorrect Authorization via the request confirmation processing in requestconfirmation.py. An attacker can execute unauthorized tools by injecting or manipulating session-history events to forge a...
CVE-2026-18236 Google-ADK Continuation Forgery
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
CVE-2026-18236: Incorrect Authorization
A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...
Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted
Issue Resolved in September 8 2026 Windows Updates The underlying issue documented in this article was resolved by Microsoft in the September 8 2026 security updates for Windows 11 KB5124008 and Windows Server 2025 KB5122871. After applying the update, the Veeam Recovery Media must be recreated...
OPENSUSE-SU-2026:11044-1 python311-google-adk-2.2.0-1.1 on GA media
These are all security issues fixed in the python311-google-adk-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-RG7C-G689-FR3X Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability
A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...
CVE-2026-4810
A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...
CVE-2026-4810
CVE-2026-4810 is a Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) affecting Python OSS, Cloud Run, and GKE. Affected ADK versions range from 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2), where an unauthenticated remote attacker can execute arbitr...
CVE-2026-4810
A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This...
Malicious Package
Overview adk-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in adk-github (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...
EUVD-2025-204502
Malicious code in adk-cli npm...
MAL-2025-192619 Malicious code in adk-github (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee46eaaea8bb0b2c04c936cd56cf6c030b92c551fe72a435a680680bc4b38bf9 The package adk-github was found to contain malicious code. Source: ghsa-malware feba07c14c2a8afde4296fe5a5c92d7bbec73e06a94fbc29edbd525f98e3ef42 Any...
EUVD-2025-204501
Malicious code in adk-github npm...
Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
MAL-2025-192618 Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
Malicious Package
Overview adk-github is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...