Critical severity · published Oct 20, 2026
CVE-2026-105772
Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId
9.1
CVSS
0.5%
EPSS
No
On KEV
Description
Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AT
ADK TypeScript (@google/adk) · Google
0.4.0 before 0.6.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105772
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105772
github.com
https://github.com/google/adk-js/commit/710b4ebed118b0ded8fc257e5d0099e6b2008bc0
github.com
https://github.com/google/adk-js/commit/8c0eaa160a43c1d791d5838a5de6ac87d905cf70
github.com
https://github.com/google/adk-js/pull/210
github.com
https://github.com/google/adk-js/security/advisories/GHSA-8hc4-6xx6-3rh3