Security: AgentEngineSandboxCodeExecutor sends 'contents' instead of 'content', silently creating empty files #5824

Activity

1. adk-bot

   added

   agent engine[Component] This issue is related to Vertex AI Agent Engine[Component] This issue is related to Vertex AI Agent Engine

   on May 23, 2026
2. adk-bot

   added the

   Bug

   issue type on May 23, 2026
3. adk-bot

   assigned

   klateefa

   on May 23, 2026
4. Thapza888 commented on May 23, 2026

   

   Thapza888

   on May 23, 2026

   Author

   More actions

   Closing this issue — details moved to Google VRP private disclosure per CVD rules. Apologies for the initial public posting.
5. Thapza888

   closed this as completedon May 23, 2026
6. Thapza888

   added 3 commits that reference this issue on May 30, 2026

   test: add regression test for input_files content key (google#5912)

   ...

   43b2601

   fix: use correct 'content' key in AgentEngineSandboxCodeExecutor inpu…

   ...

   4bc52af

   test: add regression test for input_files content key (google#5912)

   ...

   4ce56e1