CVE-2026-85297

Status: Awaiting Analysis

Description

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Published
October 26, 2026 4:17 PM
Last Modified
October 26, 2026 4:50 PM
Source
f45cbf4e-4146-4068-b7e1-655ffc2c548c

Weaknesses (CWE)

CWE-340

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry