{"slug": "security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for", "title": "Security researchers find privilege escalation flaws in Google's Agent Development Kit for Python", "summary": "Pillar Security discovered multiple privilege escalation flaws in Google's Agent Development Kit for Python, which has over 90 million downloads, allowing public-facing AI agents to trigger more privileged automation, manipulate pull-request reviews, and expose credentials via prompt injection in malicious pull requests. The researchers demonstrated the first documented agent-to-agent exploitation method, where one AI agent compromised another with higher privileges. Google patched the underlying issue but classified it non-rewardable due to social engineering involvement.", "body_md": "# Security researchers find privilege escalation flaws in Google's Agent Development Kit for Python\n\nPillar Security discovered multiple attack paths in Google's Agent Development Kit for Python (90+ million downloads) that could allow public-facing AI agents to trigger more privileged automation, manipulate pull-request reviews, and expose credentials through prompt injection in malicious pull requests. The researchers demonstrated the first documented agent-to-agent exploitation method, where one AI agent could compromise another with higher privileges. Google patched the underlying issue but classified it non-rewardable due to social engineering involvement.\n\n## Topics\n\n## Sources\n\n- Press\n[Read article](https://www.csoonline.com/article/4204906/google-adk-flaws-reveal-what-happens-when-ai-agents-trust-the-wrong-message.html) - Press\n[Read article](https://www.theregister.com/security/2026/08/03/google-dev-kit-spurs-first-ever-agent-on-agent-violence/5282496)\n\n## Go deeper\n\nThis intelligence is sourced automatically from public sources across the web and synthesised by the Prefactor AI pipeline. Stories are reviewed before publication.", "url": "https://wpnews.pro/news/security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for", "canonical_source": "https://www.getreadyforagents.com/news/google-adk-privilege-escalation/", "published_at": "2026-08-04 20:04:59+00:00", "updated_at": "2026-08-04 20:49:07.966396+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-policy"], "entities": ["Pillar Security", "Google", "Agent Development Kit for Python"], "alternates": {"html": "https://wpnews.pro/news/security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for", "markdown": "https://wpnews.pro/news/security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for.md", "text": "https://wpnews.pro/news/security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for.txt", "jsonld": "https://wpnews.pro/news/security-researchers-find-privilege-escalation-flaws-in-google-s-agent-kit-for.jsonld"}}