CVE-2026-115522

Exposure of Resource to Wrong Sphere CWE-668 in FileArtifactService in Google Agent Development Kit ADK for Python google-adk versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0 allows a caller in one application to list, read, overwrite, or delete artifacts belonging to another application wh...

Google ADK-Python - Unauthenticated Builder Endpoint

Google Agent Development Kit ADK 1.7.0 through 1.28.1 and 2.0.0a1 through 2.0.0a2 on Python OSS, Cloud Run, and GKE contains a code injection and missing authentication vulnerability, letting unauthenticated remote attackers execute arbitrary code on the server, exploit requires no authentication...

CVE-2026-105772

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

@dzapio/ai (>=0.0.1, <=1.0.0), @google/adk-devtools (>=0.4.0, <=0.5.0) +7 more potentially affected by CVE-2026-105772 via @google/adk (>=0.4.0, <=0.5.0)

@google/adk NPM version =0.4.0, =0.0.1, =0.4.0, =0.0.1, =0.1.1, =1.0.0, =1.0.4 - wormxgpt 3.0.0 Source cves: CVE-2026-105772 Source advisory: MEND:CVE-2026-105772...

CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772

A Path Traversal (CWE-22) vulnerability exists in the FileArtifactService of Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 . A remote unauthenticated attacker can use crafted relative or percent-encoded path traversal sequences (e.g., ../ or ..%2F) in the userId or sessionId par...

EUVD-2026-105224

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

PT-2026-118575

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

adk-tracegauge (>=0.1.0rc1, <=0.2.0), agentic-data-scientist (0.2.3) +17 more potentially affected by CVE-2026-79696 via google-adk (>=2.0.0, <=2.6.3)

google-adk PYPI version =2.0.0, =0.1.0rc1, =0.1.0, =0.3.0, =0.5.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1, =0.8.0, =0.8.0, =1.0.0, =1.6.2 and more Source cves: CVE-2026-79696 Source advisory: SNYK:PYTHON-GOOGLEADK-21245936...

Incomplete List of Disallowed Inputs

Overview google-adk is an Agent Development Kit Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in the adk web process due to an incomplete denylist of standard library modules. An attacker can execute arbitrary code by sending a crafted test session repla...

adk-tracegauge (>=0.1.0rc1, <=0.2.0), agentic-data-scientist (0.2.3) +17 more potentially affected by CVE-2026-79696 via google-adk (>=2.0.0, <=2.6.3)

google-adk PYPI version =2.0.0, =0.1.0rc1, =0.1.0, =0.3.0, =0.5.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1, =0.8.0, =0.8.0, =1.0.0, =1.6.2 and more Source cves: CVE-2026-79696 Source advisory: MEND:CVE-2026-79696...

CVE-2026-79696

Google Cloud Agent Development Kit (ADK) for Python (versions 2.0.0 through 2.6.0) contains a code injection vulnerability in the adk web component caused by an incomplete standard library denylist . In environments where pytest is installed—on Python (OSS), Cloud Run, and GKE—an unauthenticated ...

adk-mongodb-session (0.1.0), aef-framework (0.1.5) +17 more potentially affected by CVE-2026-79707 via google-adk (>=1.5.0, <=1.19.0)

google-adk PYPI version =1.5.0, =0.1.0, =1.0.0, =0.0.15, =0.1.3, =1.1.9, =1.1.0a20251020, =0.1.0, =0.1.4 and more Source cves: CVE-2026-79707 Source advisory: SNYK:PYTHON-GOOGLEADK-21245935...

Directory Traversal

Overview google-adk is an Agent Development Kit Affected versions of this package are vulnerable to Directory Traversal via the builder endpoint when processing the filepath query parameter. An attacker can access arbitrary files on the server by supplying crafted input to the parameter. Details ...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...