Resource Exposure Vulnerability in Google Agent Development Kit for Python
CVE-2026-115522

5.3MEDIUM

Key Information:

Vendor

Google
Status
Agent Development Kit (adk) For Python
Vendor
CVE Published:
28 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-115522?

The Google Agent Development Kit for Python contains a vulnerability in FileArtifactService that allows improper access control. This flaw enables an application to access, modify, or delete artifacts of another application when both use the same FileArtifactService directory and identical user identifiers. The issue arises because the app_name parameter is not included in the on-disk path construction, allowing resource exposure across applications. Versions 2.7.0 and 1.39.1 address this by enforcing stricter directory scoping, thus eliminating the legacy fallback that caused the vulnerability.

Affected Version(s)

Agent Development Kit (ADK) for Python 1.19.0 < 1.39.1

Agent Development Kit (ADK) for Python 2.0.0a1 < 2.7.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-115522 - Proof of Concept

References

https://github.com/google/adk-python/issues/5618
issue-trackingexploit
https://github.com/google/adk-python/pull/5619
patch
https://github.com/google/adk-python/commit/f72f0db58c5c1...
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

@Nant361
.