CVE-2026-107858 | Google Agent Development Kit for Java up to 1.12.9 ADK Web missing origin validation in websockets

October 23, 2026 Yanac

A vulnerability classified as critical has been found in Google Agent Development Kit for Java up to 1.12.9. This vulnerability affects unknown code of the component ADK Web. Performing a manipulation results in missing origin validation in websockets.

This vulnerability is identified as CVE-2026-107858. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More