VULNERABILITY INTELLIGENCE
CVE-2026-79707
EPSS probability0.67%
CISA KEVNot currently listed
Published2026-09-04
Last modified2026-09-08
Description
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.
Weakness classification
- f45cbf4e-4146-4068-b7e1-655ffc2c548c: CWE-22