Google ADK flaws reveal what happens when AI agents trust the wrong message

Security flaws in Google's Agent Development Kit for Python allowed malicious instructions hidden in pull requests (prompt injection, where attackers embed hidden commands in text input) to trick AI agents into executing privileged workflows they shouldn't access, potentially letting attackers alter code reviews, expose credentials, and approve malicious changes. The vulnerabilities demonstrated how AI agents can be exploited to bypass authorization controls when one agent's output triggers another, more privileged system. Google removed the affected workflows and fixed the issues after researchers reported them in July.