{"data":{"id":"94321821-3891-4bc0-a00f-98f538829938","title":"Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent","summary":"Google deleted three AI agent workflows from its Agent Development Kit (ADK) repository after researchers discovered that a public GitHub issue could be manipulated through prompt injection (tricking an AI by hiding instructions in its input) to trick a triage agent into triggering a privileged code-fixing agent. By exploiting how the privileged workflow trusted the bot's identity, attackers could achieve arbitrary code execution (running any commands on a system) on the CI/CD runner (the automated system that tests and deploys code) and steal sensitive credentials like bot tokens and API keys.","solution":"Google deleted the three affected workflows (issue-analyze.yml, issue-fix.yml, and pr-analyze.yml). Additionally, the source text recommends that similar repositories implement: separate bot identities, narrower token and tool scopes (limiting what each credential can access), and an authorization signal that untrusted text cannot generate.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/08/google-deletes-3-adk-ai-workflows-after.html","publishedAt":"2026-08-04T11:16:23.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google","Google ADK","Google Antigravity","Gemini"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-04T11:16:23.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}