VYPR
← All advisories
Critical severityNVD Advisory· Published Sep 9, 2026

CVE-2026-79696

CVE-2026-79696

Description

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session replay.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Google/Adk Pythonreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 2.0.0 - 2.6.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.