importantSYS.SOURCE: The Hacker News• 2026-08-04T16:46:23+05:30

Google Removes Three ADK AI Workflows Due to Privileged Agent Exploit via GitHub

#ai security #github #vulnerability #ci-cd security #cloud security

Google removed three AI workflows from its ADK repository after researchers demonstrated a vulnerability allowing privilege escalation through a malicious GitHub issue. The exploit enabled arbitrary code execution and credential exfiltration via compromised CI/CD workflows.

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.

The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied

Read original article

*** END OF TRANSMISSION ***

> RUNWARE'S MODULAR DATA CENTER POD AIMS TO REVOLUTIONIZE PORTABLE AI INFRASTRUCTURE > XBOX OUTAGE DISRUPTS ACCESS TO DISC-BASED GAMES > LEAD FULL-STACK ENGINEER POSITION AT ROAME (YC S23) FOR AI-NATIVE TRAVEL TECH STARTUP > EON'S SPACE LASER NETWORK AIMS TO REPLACE UNDERSEA FIBER OPTICS FOR GLOBAL DATA TRANSMISSION > BUCKMINSTER FULLER'S 1975 LECTURES ON COMPREHENSIVE ANTICIPATORY DESIGN SCIENCE > BENDING SPOONS ACQUIRES AIRTABLE FOR $1.28 BILLION > CONCERNS ABOUT AI-GENERATED IMAGERY IN PERSONAL BLOGS > AI-ASSISTED CYBERATTACKS: THE RISE OF VIBE HACKING AND ITS IMPACT ON ENTERPRISE SECURITY > EFFICIENT FINE-TUNING OF AN 8B LANGUAGE MODEL ON RESOURCE-CONSTRAINED HARDWARE > GOOGLE REMOVES THREE ADK AI WORKFLOWS DUE TO PRIVILEGED AGENT EXPLOIT VIA GITHUB> RUNWARE'S MODULAR DATA CENTER POD AIMS TO REVOLUTIONIZE PORTABLE AI INFRASTRUCTURE > XBOX OUTAGE DISRUPTS ACCESS TO DISC-BASED GAMES > LEAD FULL-STACK ENGINEER POSITION AT ROAME (YC S23) FOR AI-NATIVE TRAVEL TECH STARTUP > EON'S SPACE LASER NETWORK AIMS TO REPLACE UNDERSEA FIBER OPTICS FOR GLOBAL DATA TRANSMISSION > BUCKMINSTER FULLER'S 1975 LECTURES ON COMPREHENSIVE ANTICIPATORY DESIGN SCIENCE > BENDING SPOONS ACQUIRES AIRTABLE FOR $1.28 BILLION > CONCERNS ABOUT AI-GENERATED IMAGERY IN PERSONAL BLOGS > AI-ASSISTED CYBERATTACKS: THE RISE OF VIBE HACKING AND ITS IMPACT ON ENTERPRISE SECURITY > EFFICIENT FINE-TUNING OF AN 8B LANGUAGE MODEL ON RESOURCE-CONSTRAINED HARDWARE > GOOGLE REMOVES THREE ADK AI WORKFLOWS DUE TO PRIVILEGED AGENT EXPLOIT VIA GITHUB