Vulnerability · Published Oct 20, 2026 · Assigned by Google

CVE-2026-105772Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Critical 9.1

In plain English

A critical-severity path traversal in ADK TypeScript (@google/adk) from Google. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 4.0)9.1Critical

Exploit odds (30 days)0.5%top 56.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.

Affected products (as reported)

Vendor	Product	Versions
Google	ADK TypeScript (@google/adk)	0.4.0 – before 0.6.0

Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://github.com/google/adk-js/security/advisories/GHSA-8hc4-6xx6-3rh3 vendor-advisory
https://github.com/google/adk-js/pull/210 patch, issue-tracking
https://github.com/google/adk-js/commit/8c0eaa160a43c1d791d5838a5de6ac87d905cf70 patch
https://github.com/google/adk-js/commit/710b4ebed118b0ded8fc257e5d0099e6b2008bc0 related