CVE-2026-19407: Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an att
Summary
A vulnerability called bucket squatting (exploiting unprotected cloud storage locations) in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions before 1.166.1 lets attackers run arbitrary code on systems (RCE, remote code execution) and steal authentication tokens belonging to tenant projects (shared computing environments).
Solution / Mitigation
Update to SDK version 1.166.1 or later.
Vulnerability Details
EPSS: 0.0%
September 15, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19407
First tracked: September 15, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%