CVE-2026-18236
A flaw in the Agent Development Kit (ADK) lets attackers forge tool confirmations, allowing them to run unauthorized tools by manipulating session history. The issue arises because the framework does not verify that a tool is registered or that the confirmation matches the original call.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
The Agent Development Kit (ADK) and any software that relies on it to execute tools. Users who deploy ADK in their environments are potentially affected.
Real-world impact
An attacker could run arbitrary tools on the affected system without permission, potentially compromising data, executing malicious code, or gaining further control.
Why this severity
The CVSS score of 9.3 reflects that the vulnerability provides complete control over tool execution with no authentication or user interaction required. It also affects all components of the system, making it a critical risk.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources