GCP-2026-012

Summary

CVE-2026-2473 affects Vertex AI Experiments from version 1.21.0 up to, but not including, 1.133.0 in Google Cloud Vertex AI. An unauthenticated remote attacker can pre-create predictably named Cloud Storage buckets (Bucket Squatting) to achieve cross-tenant remote code execution, model theft, and poisoning.

Mitigation

No customer action is needed for mitigation. Mitigations have already been applied to version 1.133.0 and later.

Related items

• MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
• HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
• CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
• MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
• CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database