HighVulnerability
GHSA-wh2j-26j7-9728: Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
- Identifiers
- CVE-2026-2473GHSA-wh2j-26j7-9728
- Published
- Record updated
- Affected
- google-cloud-aiplatform >= 1.21.0, < 1.133.0
- Fixed in
- 1.133.0
- released January 8, 2026, 43 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI, versions 1.21.0 up to but not including 1.133.0, lets an unauthenticated remote attacker pre-create predictably named Cloud Storage buckets (Bucket Squatting). This enables cross-tenant remote code execution, model theft, and poisoning.
Mitigation
This vulnerability was patched and no customer action is needed.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- google-cloud-aiplatformPyPILLM dependency since 2020-11-09 · 21 tracked dependents
Related items
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
- CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database