Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-115522 · Microsoft / collected KEV context

cve-program · CVE-2026-115522

• https://github.com/google/adk-python/issues/5618
• https://github.com/google/adk-python/pull/5619
• https://github.com/google/adk-python/commit/f72f0db58c5c1f4e8b8d4f04b8c592c9e49cbe9e
• https://github.com/google/adk-python/commit/c27d8688ed9ea619587ad96cbfd641c34dd7340c
• https://github.com/google/adk-python/commit/0ae2bffdd2628af6c8643bc4fd40c2f49f0c6bd4
• https://github.com/google/adk-python/releases/tag/v1.39.1
• https://github.com/google/adk-python/releases/tag/v2.7.0

• Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python · Newly collected advisory · 28 Oct 2026