CVE-2026-4810

Remote Code Execution in Google Agent Development Kit (ADK)

State: Published
Severity: 9.3 Critical
Published: Apr 13, 2026
Updated: Apr 13, 2026
Reserved: Mar 25, 2026

Description

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance.

This vulnerability was patched in versions 1.28.1 and 2.0.0a2.

Customers need to redeploy the upgraded ADK to their production environments. In addition, if they are running ADK Web locally, they also need to upgrade their local instance.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber	GoogleCloud

Weaknesses

CWE-306 Missing authentication for critical function

Affected Products

Product	Versions
Agent Development Kit (ADK)Google Cloud	1.7.0 to before 1.28.1Affected 2.0.0a1 to before 2.0.0a2Affected

References

https://github.com/google/adk-python/blob/main/CHANGELOG.md#1274-2026-03-26

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.