CVE-2026-19407
7.7
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Clear
Summary
Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Google Cloud | Gemini Enterprise Agent Platform SDK for Python | 1.16.0 < 1.165.1 | affected |
Weaknesses
- CWE-330: CWE-330 Use of Insufficiently Random Values
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.