Known vulnerabilities in Google Agent Development Kit (ADK) for Java
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-107858 | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942)… | 7.2 High | Oct 23, 2026 |