Vulnerability Description
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.
Related Weaknesses (CWE)
References
- https://github.com/google/adk-python/blob/main/CHANGELOG.md#1220-2026-01-08
- https://github.com/google/adk-python/commit/6f259f08b3c45ad6050b8a93c9bd85913451
FAQ
What is CVE-2026-79707?
CVE-2026-79707 is a documented vulnerability. A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary f...
How severe is CVE-2026-79707?
CVSS scoring is not yet available for CVE-2026-79707. Check NVD for updates.
Is there a patch for CVE-2026-79707?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.