GitHub

Researchers Find Agent-to-Agent Privilege Escalation in Google’s ADK That Could Expose Secrets

The exploit shows how a public, low-privilege AI agent can be manipulated to trigger a maintainer-level agent and thereby put repository tokens and automated workflows at risk.