Google ADK for Python hit by CVSS 10 unauthenticated RCE — patch now
A crafted test-session replay runs code on any 2.0-2.6 install with pytest present — OSS, Cloud Run or GKE. It's the third ADK agent-security flaw since July.
Copy markdown
CVSS 10.0, and it needs no login
CVE-2026-79696 is an unauthenticated remote code execution flaw in Google's Agent Development Kit for Python: an attacker-crafted test-session replay slips past an incomplete standard-library denylist and executes arbitrary code. It scores a maximum 10.0 — total loss of confidentiality, integrity, and availability.
You're exposed if pytest is installed — upgrade to 2.7.0
Every release from 2.0.0 through 2.6.0 is vulnerable whenever pytest is present, which covers most local dev, CI, Cloud Run, and GKE setups. There's no half-measure worth leaning on: move to ADK 2.7.0, which ships the corrected denylist.
The third ADK agent-security hole since July
It follows July’s CVE-2026-18236 (CVSS 9.3), where forged session history could approve tool calls the model never made, and the "CoreBreak" class that also hit AWS and Vercel. If you build agents on ADK, treat session history and tool-call payloads as attacker-controlled input, not trusted state.
Elsewhere: DeepMind's AlphaGenome Atlas is free to build on
Google DeepMind published precomputed molecular-effect predictions and AVI scores for all ~9 billion single-point human DNA variants, free for research. A lookup that used to mean running the model is now a table read — opening weekend projects in variant triage and genomics tooling.