What’s Vulnerable › Vulnerabilities
CVE-2026-2473: Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft.
- Severity: high (CVSS 7.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-20 · updated 2026-06-17
- Weakness: CWE-340
Description
Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed.
Affected products
- Google Cloud Vertex AI Experiments: from 1.21.0 before 1.133.0 — fixed in 1.133.0
How to fix
Upgrade to a fixed version: Google Cloud Vertex AI Experiments 1.133.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-2473 or the next vulnerability affects your stack