CVE-2026-79707: Arbitrary File Read in Google Agent Development Kit (ADK)
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
google-adkto a version that resolves this vulnerability.Fixed in 1.22.0
Event History
Frequently Asked Questions
Which deployments are exposed?
Python deployments of Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 are affected if the builder endpoint is reachable by an attacker.
Does an attacker need credentials or prior access?
No. The issue can be exploited remotely without authentication by sending a crafted file_path query parameter to the builder endpoint.
What should be done to remediate the issue?
Upgrade to a version later than 1.21.0. The referenced changelog identifies version 1.22.0, dated 2026-01-08, and the referenced commit as the fix.
What is a temporary mitigation if an upgrade cannot be performed immediately?
Restrict access to the builder endpoint so unauthenticated remote users cannot reach it. This reduces exposure because exploitation requires access to that endpoint.