Bucket Squatting in Cloud Run MCP <1.11.0: Arbitrary Code Exec on GCP
CVE-2026-85297 Published on October 26, 2026

Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

NVD

Vulnerability Analysis

CVE-2026-85297 can be exploited with network access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
PASSIVE

Weakness Type

Generation of Predictable Numbers or Identifiers

The product uses a scheme that generates numbers or identifiers that are more predictable than required.


Affected Versions

Google Cloud Cloud Run MCP: