PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-105772 Google CVE debrief

CVE-2026-105772 is a critical vulnerability in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0, allowing remote unauthenticated attackers to read and write files via path traversal in the FileArtifactService. The vulnerability has a CVSS score of 9.1 and is considered critical. Affected product deployments should be identified, and owners assigned for follow-up. The vulnerability allows attackers to read files matching the artifact directory layout or write files outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences in the userId or sessionId parameters.

Vendor
Google
Product
ADK TypeScript (@google/adk)
CVSS
CRITICAL 9.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-20
Original CVE updated
2026-10-20
Advisory published
2026-10-20
Advisory updated
2026-10-20

Who should care

Defenders of systems using Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 should assess exposure and prioritize upgrading to version 0.6.0 or later. This includes operators, platform administrators, vulnerability management teams, and security teams who need to review compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

CVE-2026-105772 is a critical vulnerability in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0, allowing remote unauthenticated attackers to read and write files via path traversal in the FileArtifactService. Defenders of systems using these versions should assess exposure and prioritize upgrading to version 0.6.0 or later.

  • Remote unauthenticated attackers can read sensitive files
  • Remote unauthenticated attackers can write files outside intended storage
  • Verification of ADK API server configuration is necessary
  • Upgrade to version 0.6.0 or later is required for fix

Technical summary

The vulnerability is caused by a path traversal issue in the FileArtifactService of Google ADK TypeScript (@google/adk). The issue allows remote unauthenticated attackers to read files matching the artifact directory layout or write files outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences in the userId or sessionId parameters. Affected product context includes Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0. Defensive impact includes verifying ADK API server configuration and ensuring the default InMemoryArtifactService is used if possible.

Defensive priority

High

Recommended defensive actions

  • Upgrade to @google/adk version 0.6.0 or later
  • Verify that the ADK API server is not exposed with the non-default FileArtifactService enabled
  • Use the default InMemoryArtifactService if possible
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability is caused by a path traversal issue in the FileArtifactService of Google ADK TypeScript (@google/adk). The issue allows remote unauthenticated attackers to read files matching the artifact directory layout or write files outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences in the userId or sessionId parameters.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-105772 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-105772

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-105772 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105772

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via pat

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105772.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://github.com/google/adk-js/security/advisories/GHSA-8hc4-6xx6-3rh3

    Supplemental source - vendor-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/google/adk-js/pull/210

    Supplemental source - patch, issue-tracking

  • Source reference

    Unverified legacy reference

    URL: https://github.com/google/adk-js/commit/8c0eaa160a43c1d791d5838a5de6ac87d905cf70

    Supplemental source - patch

  • Source reference

    Unverified legacy reference

    URL: https://github.com/google/adk-js/commit/710b4ebed118b0ded8fc257e5d0099e6b2008bc0

    Supplemental source - related

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.