Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework did not verify if the target tool was registered to the executing agent, did not validate if the tool actually required confirmation, and did not match the confirmation arguments against the original tool call event in the history.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-29 | 2 | Disclosure1General1 |
| 2026-09-05 | 1 | General1 |
| 2026-10-09 | 1 | Patch1 |
The Hacker News, August 6. CoreBreak. CVE-2026-18830, CVE-2026-18236, CVE-2026-64650, CVE-2026-64651. Fixes shipped. The class did not. https://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.html
Post summary
The text lists four CVEs and states that fixes have shipped. It provides no PoC, exploit details, active-exploitation claim, or specific technical description.
CVE-2026-18236: Google Agent Development Kit Tool Confirmation Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04wP2ky0
Post summary
A headline references CVE‑2026‑18236 but lacks any technical, exploit, or mitigation details, so it amounts to a generic mention.
🚨*CVE* CVE-2026-18236 A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into … https://www.cve.org/CVERecord?id=CVE-2026-18236 ----- Traducción: CVE-2026-18236 Una… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑18236, providing a brief technical description of the flaw in the Agent Development Kit, but does not include a PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-18236 A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into … https://www.cve.org/CVERecord?id=CVE-2026-18236
Post summary
The text briefly outlines CVE-2026-18236, noting it permits continuation forgery and event injection, but offers no PoC, exploit code, active exploitation indication, patch, or debunking.