{"data":{"id":"10142eac-90d2-4f0f-992d-d31e9bd4ccc8","title":"Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering","summary":"Pillar Security found an agent-to-agent attack in Google's Agent Development Kit for Python where an attacker could trick a low-privileged public AI agent into communicating with a high-privileged agent (one with special access), potentially exposing secrets and allowing unauthorized changes to code repositories. This attack could enable supply chain compromise, where attackers manipulate the software development process to inject malicious code. The vulnerability required social engineering to fully exploit but demonstrated how AI agents with different privilege levels can become security weak points if not properly isolated.","solution":"Google addressed the issue through hardening (making the system more resistant to attacks) after being notified in early June. A separate vulnerability in the Antigravity-SDK-based agent that could lead to remote code execution was fixed in late July.","labels":["security"],"sourceUrl":"https://www.securityweek.com/gemini-agent-to-agent-attack-exposed-secrets-enabled-pull-request-tampering/","publishedAt":"2026-08-04T10:54:30.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google","Gemini","Agent Development Kit","adk-python"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-04T10:54:30.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}