CVE-2026-85297EUVD-2026-109906
Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.11.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Google Cloud Run MCP, a tool for deploying and managing services on Google Cloud Platform, is affected by this vulnerability. An attacker could exploit it to intercept proprietary source code, run arbitrary code, and steal data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Google Cloud Cloud Run MCP
fixed in 1.11.0