Adk Typescript Google Adk
Monthly
Path traversal in the FileArtifactService of Google ADK TypeScript (@google/adk) 0.4.0 through 0.5.x allows remote unauthenticated attackers to read files outside the configured artifact storage root by supplying crafted relative or percent-encoded sequences (../, ..%2F) in the userId or sessionId parameters, with a write primitive available when an agent tool path invokes saveArtifact. Exploitation is contingent on the operator explicitly enabling the non-default FileArtifactService and exposing the ADK API server to attacker-reachable traffic; applications using the default InMemoryArtifactService are unaffected. No public exploit code has been identified at time of analysis, and the issue is fixed in @google/adk 0.6.0; the assessed CVSS 3.1 score is 9.1-adjacent in impact (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:N) because the service must first be misconfigured into the file-backed mode.
Path traversal in the FileArtifactService of Google ADK TypeScript (@google/adk) 0.4.0 through 0.5.x allows remote unauthenticated attackers to read files outside the configured artifact storage root by supplying crafted relative or percent-encoded sequences (../, ..%2F) in the userId or sessionId parameters, with a write primitive available when an agent tool path invokes saveArtifact. Exploitation is contingent on the operator explicitly enabling the non-default FileArtifactService and exposing the ADK API server to attacker-reachable traffic; applications using the default InMemoryArtifactService are unaffected. No public exploit code has been identified at time of analysis, and the issue is fixed in @google/adk 0.6.0; the assessed CVSS 3.1 score is 9.1-adjacent in impact (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:N) because the service must first be misconfigured into the file-backed mode.