Business ❯ Information Security ❯ Risk Management ❯ Threat Modeling

Access Control

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

The flaw let a public triage agent be prompt‑injected to call a maintainer‑level agent, exposing tokens and enabling code execution on CI runners that could taint downstream builds.