Back to article
Unit 42

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE (opens in new tab)

Covered by 3 sources See all sources covering this story including thehackernews.com, lemondeinformatique.fr

Covered in 3 articles

thehackernews.com·

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

Feeds
csoonline.com·

Google’s Vertex AI SDK could allow RCE through bucket squatting

Feeds

In other languages

lemondeinformatique.fr·

Une faille RCE trouvée dans le SDK Vertex AI de Google

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help