CVE-2026-115522

The Google Agent Development Kit (ADK) for Python (google-adk) contains a Cross-Application Artifact Namespace Isolation vulnerability (CWE-668) in the FileArtifactService component. This affects versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0 . The root cause is that the service accepts a...

CVE-2026-115522 Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python

Exposure of Resource to Wrong Sphere CWE-668 in FileArtifactService in Google Agent Development Kit ADK for Python google-adk versions 1.19.0 before 1.39.1 and 2.0.0a1 before 2.7.0 allows a caller in one application to list, read, overwrite, or delete artifacts belonging to another application wh...