Skip to content
fr Sign in
8.7 High

CVE-2026-79707 A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0…

Description

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.

Affected products and versions

Product Affected versions Fixed in
Agent Development Kit (ADK) 1.9 1.9.0 → < 1.22.0 1.22.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Agent Development Kit (ADK)

The 2 CVEs of Agent Development Kit (ADK) →
CVE-2026-4810 A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and… 9.3 Critical
Track this CVE