Threats affecting pkg:pypi/google-adk-python

A vulnerability in Google Agent Development Kit (ADK) for Python's FileArtifactService allows an application to access artifacts of another application when both share a root directory and user ID. This occurs because the service accepted an application name in its API but did not use it when constructing on-disk paths, leading to cross-application access. The issue affects versions before 1.39.1 in the 1.x series and before 2.7.0 in the 2.x series. The vulnerability was addressed by enforcing full per-application path scoping in version 2.7.0 and backported to 1.39.1. The CVSS 4.0 base score is 5.3, indicating medium severity.