CVE-2026-107858— Google ADK Java 服务器跨站 WebSocket 劫持及 CORS 漏洞
一分钟漏洞结论
影响对象
Google Agent Development Kit (ADK) for Java
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Google Java 版 Agent 开发套件（ADK）中的开发 Web 服务器（ADK Web）存在 WebSocket 源验证缺失（CWE-1385）以及针对不可信域域的宽松跨域策略（CWE-942）漏洞。受影响版本包括： 0.1.0 至 1.13.0 之前的版本，以及 0.3.0 至 1.13.0 之前的版本。 该漏洞允许远程攻击者利用开发者在服务器运行时访问的恶意网页，控制本地运行的代理（agent）并读取其数据。具体而言： WebSocket 端点默认接受来自任意源的连接：在 0.1.0 至 1.5.0
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-107858 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server
来源: CVE Program / CVE List V5
Vulnerability Description
Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The /run_live WebSocket endpoint accepts connections from any origin by default (hardcoded via setAllowedOrigins("*") in versions 0.1.0 through 1.5.0, and defaulting to * via adk.web.cors.origins in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns Access-Control-Allow-Origin: * by default. Because the server has no authentication and requests originate from the developer's browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the adk.web.cors.origins property to an explicit allowlist of trusted origins (such as http://localhost:8000). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the /run_live WebSocket endpoint, and rejects DNS-rebinding requests over loopback.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
CWE-1385
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Agent Development Kit (ADK) for Java | 0.1.0 ~ 1.13.0 | - |
|
|
| Agent Development Kit (ADK) for Java | 0.3.0 ~ 1.13.0 | - |
|
二、漏洞 CVE-2026-107858 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-107858 的情报信息
请登录查看更多情报信息。
CVE-2026-107858 补丁与修复 (4)
CVE-2026-107858 其他参考 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2026-107858
暂无评论