CVE-2026-85297: Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

Severity: high (CVSS 7.7 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-26
Weakness: CWE-340

Description

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Affected products

Google Cloud Cloud Run MCP: before 1.11.0 — fixed in 1.11.0

How to fix

Upgrade to a fixed version: Google Cloud Cloud Run MCP 1.11.0. Check the vendor advisory for mitigations.

References

https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0

Get alerted when CVE-2026-85297 or the next vulnerability affects your stack