Vulnerability · Published Apr 13, 2026 · Assigned by GoogleCloud
CVE-2026-4810Remote Code Execution in Google Agent Development Kit (ADK)
Critical 9.3
In plain English
A critical-severity missing authentication in Agent Development Kit (ADK) from Google Cloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.
Official description
A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This vulnerability was patched in versions 1.28.1 and 2.0.0a2. Customers need to redeploy the upgraded ADK to their production environments. In addition, if they are running ADK Web locally, they also need to upgrade their local instance.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | google-adk | 1.28.1 | GHSA-rg7c-g689-fr3x |
| PyPI | google-adk | 2.0.0a2 | GHSA-rg7c-g689-fr3x |
| PyPI | google-adk | 1.28.1, 2.0.0a2 | PYSEC-2026-344 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Google Cloud | Agent Development Kit (ADK) | 1.7.0 – before 1.28.12.0.0a1 – before 2.0.0a2 |
Weakness: CWE-306 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber