Google · Gemini Enterprise Agent Platform Sdk For Python · CVE-2026-19407
**Name of the Vulnerable Software and Affected Versions**
Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1
**Description**
Bucket Squatting allows an attacker to achieve Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a remote machine, and tenant-project token theft.
**Recommendations**
Update Google Cloud Gemini Enterprise Agent Platform SDK for Python to version 1.166.1 or later.