Code Injection in Google Cloud ADK for Python

Executive Summary

This is a Code Injection vulnerability in Google Cloud Agent Development Kit (ADK) for Python. It allows an unauthenticated remote attacker to execute arbitrary code by exploiting a crafted test session replay in the adk web component. The issue affects versions 2.0.0 through 2.6.0 and occurs in Python (OSS), Cloud Run, and GKE environments where pytest is installed.

Useful 0 Not Useful 0

Detection Guidance

Check for installed versions of google/adk-python between 2.0.0 and 2.6.0 using pip list or pip show google-adk-python. Inspect agent configurations for references to standard library modules like cProfile, pdb, trace, timeit, or pydoc in YAML files. Monitor for unexpected test session replays or arbitrary code execution attempts in logs.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially leading to unauthorized access, data theft, or system compromise. Since it requires no authentication, any exposed instance of the affected ADK versions could be targeted.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance risks include legal penalties, reputational damage, and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade to google/adk-python version 2.7.0 or later immediately. Remove or restrict access to agent configurations that reference standard library modules. Review and audit all agent configurations for suspicious imports or callbacks. Implement network monitoring for unauthorized test session replays or code execution attempts.

Useful 0 Not Useful 0