PT-2026-123398

CVE-2026-85297

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 4.0
7.7
High
MetricsAV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.
Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-340: Generation of Predictable Numbers or Identifiers
Related identifiers
CVE-2026-85297
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com