Sanil Dulal

🚨 Google disclosed a CVSS 10.0 vulnerability in ADK for Python today. The fixed version shipped 27 days ago. CVE-2026-79696 affects specific conditions: 🔹 ADK for Python 2.0.0 through 2.6.0 🔹 The adk web development interface 🔹 Environments where pytest is installed 🔹 Network access to the affected path Google advises upgrading to version 2.7.0 or later and keeping adk web off the network. An inventory result containing “Google ADK” does not prove exposure. Teams need to check the running interpreter, deployed package version, listening address and actual network route. The main lesson is that agent security starts before the model. Development interfaces and configuration loaders can carry host-level authority. 🔗 https://t.co/yc42bDsZiD #GoogleADK #CVE #AISecurity #AgentSecurity #ApplicationSecurity #DevSecOps #CyberSecurity

Name of the Vulnerable Software and Affected Versions OrangeHRM versions 5.0 through 5.8 Description OrangeHRM Open Source versions 5.0 through 5.8 does not properly restrict email template file resolution to the intended plugins directory. This allows an authenticated actor who can influence the template path to read arbitrary local files. Recommendations Update to version 5.8.1 or later.