Sanil Dulal

🚨 Google disclosed a CVSS 10.0 vulnerability in ADK for Python today. The fixed version shipped 27 days ago. CVE-2026-79696 affects specific conditions: 🔹 ADK for Python 2.0.0 through 2.6.0 🔹 The adk web development interface 🔹 Environments where pytest is installed 🔹 Network access to the affected path Google advises upgrading to version 2.7.0 or later and keeping adk web off the network. An inventory result containing “Google ADK” does not prove exposure. Teams need to check the running interpreter, deployed package version, listening address and actual network route. The main lesson is that agent security starts before the model. Development interfaces and configuration loaders can carry host-level authority. 🔗 https://t.co/yc42bDsZiD #GoogleADK #CVE #AISecurity #AgentSecurity #ApplicationSecurity #DevSecOps #CyberSecurity

Name of the Vulnerable Software and Affected Versions OrangeHRM versões 5.0 através de 5.8 Description OrangeHRM Open Source versões 5.0 através de 5.8 não restringe adequadamente a resolução de arquivos de modelo de e-mail ao diretório de plugins pretendido. Isso permite que um ator autenticado que possa influenciar o caminho do modelo leia arquivos locais arbitrários. Recommendations Atualize para a versão 5.8.1 ou posterior.