Advisories · Technology

ADK TypeScript (@google/adk).

Every CVE that names ADK TypeScript (@google/adk) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105772 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId
- ADK TypeScript (@google/adk)
- Path traversal
Not analysed yet 20 Oct 2026