Live › vulnerability › CVE-2026-105772
Go to dashboardThe FileArtifactService in the @google/adk TypeScript package does not block ../ or %2F sequences in userId or sessionId, so a remote unauthenticated attacker can read files in the artifact layout and write files outside the artifact root when an agent tool calls saveArtifact. Applications using the default InMemoryArtifactService are not affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
0.4.0 before 0.6.00.6.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.
This page as .md · .json · in your agent: get_signal("CVE-2026-105772")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.