CVE-2026-79696

CVE-2026-79696 is a critical (CVSS 4.0: 10.0) code injection flaw (CWE-184) in the adk web component of Google Cloud's Agent Development Kit (ADK) for Python, affecting versions 2.0.0 through 2.6.0. It is triggered when adk web processes a crafted test session replay, allowing an unauthenticated remote attacker with network access to the server to execute arbitrary code in environments where pytest is installed. Successful exploitation yields full code execution in the process or container running adk web, which on Cloud Run or GKE could mean compromise of the serving container and any credentials available to it. Only deployments of ADK for Python 2.0.0-2.6.0 on Python (OSS), Cloud Run, or GKE that both run adk web and have pytest installed are affected. There is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS assigns a ~0.4% 30-day exploitation probability, so it is not currently known to be exploited in the wild.

What to do: Upgrade ADK for Python to a release newer than 2.6.0 as soon as a patched version is available (the advisory does not specify the fixed version). As interim mitigations, remove pytest from production container images that serve adk web on Cloud Run or GKE, and restrict adk web to localhost or trusted networks with authentication in front. Inventory any deployments running ADK 2.0.0-2.6.0 with adk web enabled and watch for Google's patched release.