Google removed three AI agent workflows from its Agent Development Kit (ADK) Python repository after Pillar Security discovered a critical vulnerability. The flaw allowed malicious actors to exploit a public GitHub issue to manipulate a triage agent, triggering a privileged code-fixing agent through prompt injection. The attack leveraged the bot's collaborator status to execute unauthorized comman
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
