CVE-2026-18236

Name of the Vulnerable Software and Affected Versions Agent Development Kit (affected versions not specified)

Description An issue allows for continuation forgery in tool confirmations. An attacker capable of manipulating or injecting events into the session history can execute unauthorized tools by forging a tool confirmation response. This occurs because the framework fails to verify if the target tool is registered to the executing agent, does not validate if the tool requires confirmation, and does not match the confirmation arguments against the original tool call event in the history.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.