Vulnary
← back to the feed
Critical· 9.3

CVE-2026-18236

A flaw in the Agent Development Kit (ADK) lets attackers forge tool confirmations, allowing them to run unauthorized tools by manipulating session history. The issue arises because the framework does not verify that a tool is registered or that the confirmation matches the original call.

publishedJul 29, 2026
last modifiedJul 29, 2026
sourcesNVD
severity · cvss
9.3
critical · how bad it is
exploitation · epss
n/a
chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Sep 12, 2026

No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.

01

Who is affected

The Agent Development Kit (ADK) and any software that relies on it to execute tools. Users who deploy ADK in their environments are potentially affected.

02

Real-world impact

An attacker could run arbitrary tools on the affected system without permission, potentially compromising data, executing malicious code, or gaining further control.

03

Why this severity

The CVSS score of 9.3 reflects that the vulnerability provides complete control over tool execution with no authentication or user interaction required. It also affects all components of the system, making it a critical risk.

04

What to do about it

no official fix yet

No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.

No fix documented in sources

05

Timeline

06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Attack requirementsNone
Privileges requiredNone
User interactionNone needed
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →