Google Cloud Vertex AI Vulnerability Exposes Cross-Tenant RCE Risk

A recent vulnerability in Google Cloud's Vertex AI Python SDK left the door open for cross-tenant attacks, allowing hackers in separate projects to hijack model uploads and potentially execute malicious code remotely. This flaw was fortunately patched in version 1.148.0, released on April 15, 2026.

https://osintsights.com/google-cloud-vertex-ai-vulnerability-exposes-cross-tenant-rce-risk?utm_source=mastodon&utm_medium=social

#GoogleCloud #VertexAi #CrosstenantVulnerability #RemoteCodeExecution #SupplyChain