Advisories · Technology

Google Agent Development Kit (ADK) for Java.

Every CVE that names Google Agent Development Kit (ADK) for Java among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107858 CVE record

CVSS 7.2 High

Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server
- Google Agent Development Kit (ADK) for Java
- Authentication bypass
- CWE-942
Not analysed yet 23 Oct 2026