CVE-2026-105772
Received Received - Intake

Path Traversal in Google ADK TypeScript FileArtifactService

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Google Inc.

Description
Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-105772
EUVD
EUVD-2026-105224

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Google ADK TypeScript (@google/adk) 0.4.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Path Traversal vulnerability in Google ADK TypeScript's FileArtifactService affecting versions before 0.6.0. It allows remote unauthenticated attackers to read or write files outside the intended artifact storage directory by using crafted relative or percent-encoded path sequences like ../ or ..%2F in userId or sessionId parameters. The vulnerability only affects systems using FileArtifactService, not the default InMemoryArtifactService.

Detection Guidance

To detect this vulnerability, check if your system is running a vulnerable version of @google/adk (prior to 0.6.0) with FileArtifactService enabled. Inspect network traffic for requests containing userId or sessionId parameters with path traversal sequences like ../ or ..%2F. Review logs for unauthorized file access attempts outside the artifact storage root.

Impact Analysis

An attacker could read sensitive files from other users' directories or write malicious files outside the intended storage location. This could lead to data breaches, unauthorized modifications to system files, or compromise of application integrity. The high CVSS score of 9.1 indicates significant potential impact on confidentiality and integrity.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. It may result in non-compliance with data confidentiality and integrity controls, potentially leading to regulatory penalties and loss of trust.

Mitigation Strategies
  • Upgrade @google/adk to version 0.6.0 or later to apply the patch.
  • Disable FileArtifactService if not required, as InMemoryArtifactService is unaffected.
  • Restrict API server access to trusted networks or users.
  • Implement middleware to validate userId and sessionId inputs before processing.
  • Run Node.js with least privileges to limit potential damage from exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105772. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart