Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents
Pillar Security researchers demonstrated an agent-to-agent privilege boundary failure in Google's Agent Development Kit (ADK) repository, where a low-privilege triage agent could be manipulated via pr…