What happened
CVE-2026-79696 (CVSS 10.0) is a code-injection vulnerability in 'adk web' in Google Cloud Agent Development Kit (ADK) for Python, versions 2.0.0 through 2.6.0, affecting OSS, Cloud Run, and GKE environments where pytest is installed. An unauthenticated remote attacker can execute arbitrary code using a crafted test session request, with no authentication required.
Why it matters
ADK is Google's own framework for building agentic AI applications and is deployed on Cloud Run and GKE — mainstream production environments for agent workloads. A maximum-severity (CVSS 10.0), unauthenticated remote-code-execution flaw in the core agent-serving surface of a major cloud provider's agent framework represents a critical, widely-deployed attack surface: any exposed adk web instance with pytest installed can be fully compromised without credentials, giving an attacker code execution inside the agent's runtime and access to whatever tools, credentials, or data that agent is scoped to.
Attack vector
Unauthenticated remote attacker sends a crafted test session request to the 'adk web' interface, exploiting pytest's test-collection/execution mechanics to achieve arbitrary code execution in the agent's runtime environment.
Affected systems
Google Cloud Agent Development Kit (ADK) for Python, versions 2.0.0 through 2.6.0, on OSS/Cloud Run/GKE where pytest is installed
Mitigation
Upgrade past the affected version range per the google/adk-python fix commit; avoid installing pytest in production adk web deployments; restrict network exposure of adk web endpoints.