Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI...
Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents
1. Basic Information
Article Name: I'll Just Call You: Agent-to-Agent Privilege Boundary Failures in CI/CD on Google's ADK Repository
Publisher: Pillar Security
Publication Date: August 3, 2026
The flaws show how agentic workflows can turn trusted repository signals into privilege-escalation paths that conventional…
Google removed 3 ADK AI workflows after Pillar showed a public GitHub issue could trigger a privileged agent & reach code…
Security vulnerabilities discovered in the GitHub repository for the Google Agent Development Kit for...
A low-privilege Google ADK for Python agent could be abused to inject prompts into privileged agents, leading to PR poisoning.
Google has fixed the issues, which exploited a trust boundary between two AI agents with different privileges to potentially…
Pillar Security found a prompt injection attack that lets a public AI agent compromise a privileged one in Google's gemini-cli,…
