Code injection in Google Cloud Agent Development Kit (ADK) for Python adk web due to an incomplete standard library denylist allows unauthenticated network attackers to achieve RCE via a crafted test session replay. Affects google-adk 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE where pytest is installed. Upgrade to 2.7.0+ and do not expose adk web to a network.