CyberRota Analysis
AI-GeneratedA Path Traversal vulnerability in the builder endpoint of Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows unauthenticated remote attackers to access arbitrary files by manipulating the file_path query parameter. This could lead to unauthorized information disclosure, potentially exposing sensitive data. Organizations using affected versions of the ADK should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.