Google removed 3 ADK AI workflows after Pillar showed a public GitHub issue could trigger a privileged agent & reach code ...
A low-privilege Google ADK for Python agent could be abused to inject prompts into privileged agents, leading to PR poisoning ...
The flaws show how agentic workflows can turn trusted repository signals into privilege-escalation paths that conventional identity and CI/CD controls may not reveal.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results