{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/agent-development-kit-adk/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-79707"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Agent Development Kit (ADK)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe Agent Development Kit (ADK) Dev UI builder endpoint is affected by a path traversal vulnerability (CVE-2026-79707) that allows for arbitrary file reading. A public proof-of-concept exploit script is currently available, which specifically targets this endpoint to retrieve files, such as .env files.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker to read arbitrary files from the host system, which may result in the exposure of sensitive data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eOrganizations should review their infrastructure to identify instances of the Agent Development Kit (ADK) and monitor logs for unauthorized access patterns targeting the builder endpoint.\u003c/p\u003e\n","date_modified":"2026-11-12T17:43:24Z","date_published":"2026-11-12T17:43:24Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-79707/","summary":"A public exploit has been published for a path traversal vulnerability in the Agent Development Kit (ADK) Dev UI builder endpoint, enabling arbitrary file read.","title":"Agent Development Kit (ADK) Path Traversal Vulnerability (CVE-2026-79707)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-79707/"}],"language":"en","title":"CraftedSignal Threat Feed - Agent Development Kit (ADK)","version":"https://jsonfeed.org/version/1.1"}