Google Vertex AI SDK Flaw Exposes Model Uploads to Hijacking

A newly discovered flaw in the Google Vertex AI SDK for Python left model uploads vulnerable to hijacking, allowing attackers to swap models and execute code within Google's serving infrastructure in a matter of seconds. This vulnerability, found by Palo Alto Networks Unit 42, could be exploited in just 2.5 seconds - a window of…

https://osintsights.com/google-vertex-ai-sdk-flaw-exposes-model-uploads-to-hijacking?utm_source=mastodon&utm_medium=social

#GoogleVertexAi #SdkFlaw #ModelHijacking #CloudSecurity #SupplyChain