CVE-2026-107858

A flaw was found in the Google Agent Development Kit ADK for Java development web server, which can lead to unauthorized control of locally running agents and information disclosure. The server lacks authentication and does not restrict incoming WebSocket and cross-origin HTTP requests to trusted...