CVE-2026-18236
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in the Agent Development Kit (ADK) allows continuation forgery in tool confirmations. An attacker who can manipulate session history events can execute unauthorized tools by forging a confirmation response. The framework did not verify if the tool was registered, required confirmation, or matched the original call arguments.
Risk Assessment
An attacker can execute arbitrary tools without authorization, potentially leading to unauthorized access to data or systems.
Recommendation
Upgrade the Agent Development Kit to a version that includes a fix verifying confirmation consistency with original tool calls.
Original NVD description (English source)
A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework did not verify if the target tool was registered to the executing agent, did not validate if the tool actually required confirmation, and did not match the confirmation arguments against the original tool call event in the history.