Exposure of Resource to Wrong Sphere in Google ADK for Python

Executive Summary

This vulnerability is an Exposure of Resource to Wrong Sphere (CWE-668) in Google Agent Development Kit (ADK) for Python. It allows a caller in one application to access artifacts belonging to another application when both share a FileArtifactService root directory and use the same user_id. The issue occurred because the service accepted app_name in APIs but stored artifacts under a shared path (root/users/{user_id}/...) instead of app-specific paths (root/apps/{app_name}/users/{user_id}/...). Versions 1.39.1 and 2.7.0 fixed this by enforcing app-scoped paths.

Useful 0 Not Useful 0

Detection Guidance

Check if your google-adk version is below 1.39.1 or 2.7.0. Inspect FileArtifactService paths for artifacts stored in root/users/{user_id} instead of root/apps/{app_name}/users/{user_id}. Verify if multiple apps share the same root directory and user_id, which could indicate potential cross-app access.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow unauthorized access to sensitive data across different applications. If two apps share a root directory and use the same user_id, one app could list, read, overwrite, or delete artifacts belonging to the other app. This includes session-scoped artifacts if session_id matches. The impact includes data leakage, corruption, or loss of critical files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate data isolation requirements in GDPR and HIPAA. GDPR mandates strict data access controls and user consent for data sharing. HIPAA requires safeguards to prevent unauthorized access to protected health information. Cross-app data leakage could lead to non-compliance, legal penalties, and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

• Upgrade google-adk to version 1.39.1 or 2.7.0 or later to enforce app-scoped artifact storage.
• Ensure each application uses a unique root directory to prevent shared access between apps.
• Manually migrate existing artifacts from old paths (root/users/{user_id}) to new app-scoped paths (root/apps/{app_name}/users/{user_id}) if upgrading past version 2.6.0.

Useful 0 Not Useful 0