Google Cloud Agent Development Kit (ADK) for Python vulnerabilities

Latest Google Cloud Agent Development Kit (ADK) for Python CVEs

Newest publication first

1. CVE-2026-79696 Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist

   Published 2026-09-09

   Critical·CVSS 10.0 EPSS 0.74%

   A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a cra...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.