This vulnerability in Google-ADK involves incorrect authorization (CWE-863) where the framework does not properly verify tool registration, confirmation requirements, or confirmation arguments in the session history. An attacker capable of injecting or manipulating session events can forge tool confirmation responses, leading to unauthorized tool execution. The CVSS 4.0 score is 9.3 (critical), reflecting network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, availability, and security requirements. No patch or remediation guidance is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to execute unauthorized tools within the Google-ADK environment by forging confirmation responses. This compromises the integrity and security of the system, potentially leading to unauthorized actions and control without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Google-ADK environment to trusted users only and monitor for suspicious manipulation of session history events.