Read the docs
TI-2026-04195 Aliases CVE-2026-4810GHSA-rg7c-g689-fr3x

Remote Code Execution in Google Agent Development Kit (ADK)

Priority MEDIUM 52CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This vulnerability was patched in versions 1.28.1 and 2.0.0a2. Customers need to redeploy the upgraded ADK to their production environments. In addition, if they are running ADK Web locally, they also need to upgrade their local instance.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01818 78th percentileScored 2026-11-07
Fix Fixed Agent Development Kit (ADK) (Google Cloud): 1.28.1, 2.0.0a2google-adk (PyPI): 1.28.1, 2.0.0a2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GoogleAgent Development Kit (ADK)1.7.0 to before 1.28.1; 2.0.0a1 to before 2.0.0a21.28.1, 2.0.0a2Patch availableCNA
—google-adk (PyPI)1.7.0 to before 1.28.11.28.1Patch availableGHSA-rg7c-g689-fr3x
—google-adk (PyPI)2.0.0a1 to before 2.0.0a22.0.0a2Patch availableGHSA-rg7c-g689-fr3x
  • Agent Development Kit (ADK) VendorGoogle Affected 1.7.0 to before 1.28.1; 2.0.0a1 to before 2.0.0a2 Fixed in 1.28.1, 2.0.0a2 Patch available CNA
  • google-adk (PyPI) Vendor— Affected 1.7.0 to before 1.28.1 Fixed in 1.28.1 Patch available GHSA-rg7c-g689-fr3x
  • google-adk (PyPI) Vendor— Affected 2.0.0a1 to before 2.0.0a2 Fixed in 2.0.0a2 Patch available GHSA-rg7c-g689-fr3x

Remediation

  • Fix · CNA Agent Development Kit (ADK) (Google Cloud) Fixed in 1.28.1, 2.0.0a2
  • Fix · GHSA-rg7c-g689-fr3x google-adk (PyPI) Fixed in 1.28.1 Advisory →
  • Fix · GHSA-rg7c-g689-fr3x google-adk (PyPI) Fixed in 2.0.0a2 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-4810
  2. 2026-10-03 Alias added: GHSA-rg7c-g689-fr3x

References

Advisory 1

Other 2

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 17247 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences