Researchers find ‘agent-to-agent’ privilege escalation in Google’s ADK for Python repo

A low-privileged agent triggered by a PR or issue could be led to manipulate a high-privileged agent.