Pillar discloses permission boundary vulnerability between agents in Google ADK repository
Pillar：Google ADK 仓库的 Agent 间权限边界漏洞
AI summary
Pillar Security discloses permission boundary issues between agents in the Google ADK repository: a low-privilege triage agent, after being influenced by untrusted input, can trigger higher-privilege agent workflows via collaborator identity; another chain involves command restriction bypass and runtime environment credential risks. Researchers report Google confirmed fixes in July, with no in-the-wild exploitation reported; some impacts remain limited by manual merging and internal review. The case illustrates risks among identity binding, permission delegation, and untrusted input in multi-agent systems.
Why it was selected
披露了 Google ADK 仓库中低权限 Agent 触发高权限 Agent 的完整利用链，并给出权限边界与令牌作用域的加固方向。