Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and run code inside Google's serving infrastructure. Palo Alto Networks Unit 42, which found and reported the bug through Google's bug bounty pro

Related Stories

Dive into Google Cloud Innovators: Launch, Scale, and Thrive with Expert Guidance

📰

AI-Powered Travel Planners Now a Click Away on Google Cloud's Unified Platform

📰

India's Digital Foundations Tested as Google Cloud Suffers Outage After Delhi Blaze

📰

Google ADK Security Introduces Five Layers to Protect AI Agents from Attacks