CVE-2026-18236

Received Received - Intake

Continuation Forgery in Agent Development Kit

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: Google Inc.

Description

A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework did not verify if the target tool was registered to the executing agent, did not validate if the tool actually required confirmation, and did not match the confirmation arguments against the original tool call event in the history.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-07-30

AI Q&A

2026-07-30

EPSS Evaluated

N/A

NVD

CVE-2026-18236

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in the Agent Development Kit (ADK) allows an attacker to forge tool confirmations in session history. The framework fails to verify if the tool is registered to the executing agent, validate if confirmation is required, or match confirmation arguments with the original tool call. This enables unauthorized tool execution.

Impact Analysis

An attacker could exploit this to execute unauthorized tools on your system, potentially leading to data breaches, system compromise, or unauthorized actions. The high CVSS score (9.3) indicates severe impact, including confidentiality, integrity, and availability risks.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (health data privacy). Non-compliance risks include fines, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies

Update the Agent Development Kit (ADK) to the latest version to ensure proper verification of tool confirmations and session history events. Implement strict validation checks to confirm tool registration, confirmation requirements, and argument matching before executing tools.

Hi! I’m here to help you understand CVE-2026-18236. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70