SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-79696

CRITICAL · CVSS 10 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A critical code injection vulnerability exists in the Google Cloud Agent Development Kit for Python, affecting versions 2.0.0 through 2.6.0 in environments where pytest is installed. This flaw allows unauthenticated remote attackers to execute arbitrary code through a specially crafted test session replay, posing significant risks to the integrity and security of affected systems. Organizations utilizing these specific versions of the ADK in Python, particularly in Cloud Run and GKE environments, should prioritize immediate remediation efforts.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-79696
Severity
CRITICAL
CVSS
10
EPSS
0.44%

Original NVD Description

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session replay.