Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE (opens in new tab)

Covered by 3 sources including thehackernews.com, lemondeinformatique.fr

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post appeared first on .

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

thehackernews.com·

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

csoonline.com·

Google’s Vertex AI SDK could allow RCE through bucket squatting

In other languages

lemondeinformatique.fr·

Covered in 3 articles

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

Google’s Vertex AI SDK could allow RCE through bucket squatting

In other languages

Une faille RCE trouvée dans le SDK Vertex AI de Google