importantSYS.SOURCE: The Hacker News• 2026-08-04T16:46:23+05:30

Google Removes Three ADK AI Workflows Due to Privileged Agent Exploit via GitHub

#ai security #github #vulnerability #ci-cd security #cloud security

Google removed three AI workflows from its ADK repository after researchers demonstrated a vulnerability allowing privilege escalation through a malicious GitHub issue. The exploit enabled arbitrary code execution and credential exfiltration via compromised CI/CD workflows.

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.

The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied

Read original article

*** END OF TRANSMISSION ***

> ANDROID 17 QPR1 INTRODUCES NEW APIS EXCLUSIVELY FOR PIXEL OS WITHOUT AOSP RELEASE > LINGUISTIC ILLEGIBILITY IN LARGE LANGUAGE MODELS: IMPLICATIONS FOR SECURITY > DIRECT SEMANTIC COMMUNICATION BETWEEN LARGE LANGUAGE MODELS VIA CACHE-TO-CACHE MECHANISM > OPTIMIZING MEMORY USAGE WITH MATHEMATICAL TECHNIQUES AND RUST PROGRAMMING > TYPESAFE AI'S JEV MODEL OFFERS CALIBRATED DECISIONS FOR SOFTWARE AUTOMATION > APPLE UNVEILS IPHONE DUO SIMULATOR AND XCODE 27.1 BETA FOR DEVELOPERS > U.S. BORDER AGENTS PERMITTED TO SEARCH CELLPHONES WITHOUT WARRANT OR SUSPICION > DISNEY'S FIRST CTO JOINS AI STARTUP PREVIOUSLY ACCUSED OF IP INFRINGEMENT > QUICK-COMMERCE PLATFORMS DELIVER NEW IPHONES IN MINUTES IN INDIA > GOOGLE INTRODUCES FAMILY-FOCUSED AI AGENT CC FOR HOUSEHOLD COORDINATION> ANDROID 17 QPR1 INTRODUCES NEW APIS EXCLUSIVELY FOR PIXEL OS WITHOUT AOSP RELEASE > LINGUISTIC ILLEGIBILITY IN LARGE LANGUAGE MODELS: IMPLICATIONS FOR SECURITY > DIRECT SEMANTIC COMMUNICATION BETWEEN LARGE LANGUAGE MODELS VIA CACHE-TO-CACHE MECHANISM > OPTIMIZING MEMORY USAGE WITH MATHEMATICAL TECHNIQUES AND RUST PROGRAMMING > TYPESAFE AI'S JEV MODEL OFFERS CALIBRATED DECISIONS FOR SOFTWARE AUTOMATION > APPLE UNVEILS IPHONE DUO SIMULATOR AND XCODE 27.1 BETA FOR DEVELOPERS > U.S. BORDER AGENTS PERMITTED TO SEARCH CELLPHONES WITHOUT WARRANT OR SUSPICION > DISNEY'S FIRST CTO JOINS AI STARTUP PREVIOUSLY ACCUSED OF IP INFRINGEMENT > QUICK-COMMERCE PLATFORMS DELIVER NEW IPHONES IN MINUTES IN INDIA > GOOGLE INTRODUCES FAMILY-FOCUSED AI AGENT CC FOR HOUSEHOLD COORDINATION