Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE (opens in new tab) 🔧MLOps Content type: Blog 3 articles covering this post

unit42.paloaltonetworks.com··Covered by thehackernews.com + 2 more·Open original

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post appeared first on .

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

thehackernews.com·

Google’s Vertex AI SDK could allow RCE through bucket squatting

csoonline.com·

In other languages

Une faille RCE trouvée dans le SDK Vertex AI de Google

lemondeinformatique.fr·