CVE-2026-105772 - Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId
CVE ID :CVE-2026-105772 Published : Oct. 20, 2026, 5:50 p.m. | 16 minutes ago Description :Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory...