CVE-2026-107858
Description
A flaw was found in the Google Agent Development Kit (ADK) for Java development web server, which can lead to unauthorized control of locally running agents and information disclosure. The server lacks authentication and does not restrict incoming WebSocket and cross-origin HTTP requests to trusted origins. A remote attacker can exploit this flaw by tricking a user running the server into visiting a malicious webpage. Through the user's browser, the attacker can interact with the local agent, trigger registered tools, and view, modify, or delete session data.
Statement
Red Hat rates this vulnerability as Important rather than Moderate because an attacker can achieve significant confidentiality loss and execute arbitrary agent tools by pivoting through a client browser. This exploitation model relies on a victim actively hosting the local developer server while simultaneously navigating to a hostile website. Enterprise production environments remain unimpacted as the vulnerable web server is intended solely for local development and testing workflows.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Gain Privileges or Assume Identity; Varies by Context
An attacker can access any functionality that is inadvertently accessible to the source.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
