CVE-2026-79707

Path traversal in ADK builder endpoint (v1.9.0‑1.21.0) lets unauthenticated attackers read arbitrary files via file_path.

• CVSS 8.7
• 22
• Input Validation and Sanitization
• Remote

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.

CVE

CVE-2026-79707

CWE

22

CVSS base score

8.7

Published

2026-09-04

OWASP

A04 Broken Access Control

Orthogonal defect classification

Checking

Code defect classification

Incorrect Check

Category

Input Validation and Sanitization

Subcategory

Path Traversal

Accessibility scope

Remote

Impact

Information Disclosure

Affected component

Python

Fixed by upgrading

Yes

Solution

Upgrade Google Cloud ADK to version 1.22.0 (or later), which patches the Path Traversal issue in the builder endpoint.

import os
from flask import Flask, request, send_file

app = Flask(__name__)

@app.route('/builder')
def builder():
    # VULNERABLE: direct file path join allows path traversal
    file_path = request.args.get('file_path', '')
    full_path = os.path.join('/var/lib/agent/', file_path)
    return send_file(full_path)

import os
from flask import Flask, request, send_file
from werkzeug.security import safe_join

app = Flask(__name__)

@app.route('/builder')
def builder():
    # FIX: use safe_join to block path traversal
    file_path = request.args.get('file_path', '')
    full_path = safe_join('/var/lib/agent/', file_path)
    return send_file(full_path)

__VAITP_MODEL_REFUSED__

@misc{vaitp:cve202679707,
  title        = {{Path traversal in ADK builder endpoint (v1.9.0‑1.21.0) lets unauthenticated attackers read arbitrary files via file_path.}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2026},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2026-79707},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2026-79707/}}
}