CVE-2026-18236

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-18236
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18236.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-18236
Published
2026-07-29T17:37:01.519Z
Modified
2026-08-12T03:51:43.220842819Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P CVSS Calculator
Summary
Google-ADK Continuation Forgery
Details

A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework did not verify if the target tool was registered to the executing agent, did not validate if the tool actually required confirmation, and did not match the confirmation arguments against the original tool call event in the history.

Database specific 
{
    "cna_assigner": "Google",
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18236.json"
}
References

Affected packages

Git / github.com/google/adk-python

Affected ranges

Type
GIT
Repo
https://github.com/google/adk-python
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c03f333769feaeaa9fe8910fbe95cb9f2d513f54
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.5.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v.*
v.1.9.0
v0.*
v0.1.0
v0.2.0
v0.3.0
v0.4.0
v0.5.0
v1.*
v1.0.0
v1.1.0
v1.1.1
v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.14.1
v1.15.0
v1.15.1
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.2.0
v1.2.1
v1.20.0
v1.21.0
v1.22.0
v1.22.1
v1.23.0
v1.24.0
v1.24.1
v1.25.0
v1.27.2
v1.3.0
v1.32.0
v1.4.1
v1.4.2
v1.5.0
v1.6.1
v1.7.0
v1.8.0
v1.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18236.json"