high8.7
CVE-2026-79707
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenti…
Impact
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.
Affected products
| Product | Affected versions |
|---|---|
| Google Cloud Agent Development Kit (ADK) Versions 1.9.0 | through 1.21.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.