7.7Yüksek
CVE-2026-85297Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
Açıklama
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Zayıflık türü (CWE):
CWE-340
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Google Cloud | Cloud Run MCP | < 1.11.0 |