CVE-2026-105772

Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

State: Published
Severity: 9.1 Critical
Published: Oct 20, 2026
Updated: Oct 20, 2026
Reserved: Oct 5, 2026

Read the record on cve.org

Description

Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.

Scores

CVSS	Score	Vector	Source
4.0	9.1 Critical	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N	Google

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
ADK TypeScript (@google/adk)Google	0.4.0 to before 0.6.0Affected

References

https://github.com/google/adk-js/security/advisories/GHSA-8hc4-6xx6-3rh3vendor-advisory
https://github.com/google/adk-js/pull/210patchissue-tracking
https://github.com/google/adk-js/commit/8c0eaa160a43c1d791d5838a5de6ac87d905cf70patch
https://github.com/google/adk-js/commit/710b4ebed118b0ded8fc257e5d0099e6b2008bc0related

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.