CVE-2026-85297 - Vulnerability Details - OpenCVE

ReportizFlow

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction Passive

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Google Cloud	Cloud Run Mcp

No data.

No data.

References

Link	Providers
https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0

History

Wed, 28 Oct 2026 22:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Google Cloud Google Cloud cloud Run Mcp
Vendors & Products		Google Cloud Google Cloud cloud Run Mcp

Mon, 26 Oct 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Title		Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
Weaknesses		CWE-340
References		https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0
Metrics		cvssV4_0 `{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber'}`

MITRE

Status: PUBLISHED

Assigner: GoogleCloud

Published: 2026-10-26T14:58:30.464Z

Updated: 2026-10-26T14:58:30.464Z

Reserved: 2026-09-03T16:38:16.479Z

Link: CVE-2026-85297

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-10-26T16:17:23.090

Modified: 2026-10-26T16:50:49.857

Link: CVE-2026-85297

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-85297", "assignerOrgId": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "state": "PUBLISHED", "assignerShortName": "GoogleCloud", "dateReserved": "2026-09-03T16:38:16.479Z", "datePublished": "2026-10-26T14:58:30.464Z", "dateUpdated": "2026-10-26T14:58:30.464Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "shortName": "GoogleCloud", "dateUpdated": "2026-10-26T14:58:30.464Z"}, "title": "Bucket Squatting in Cloud Run MCP leads to Service Account Takeover", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-340", "description": "CWE-340 Generation of Predictable Numbers or Identifiers", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-616", "descriptions": [{"lang": "en", "value": "CAPEC-616 Establish Rogue Location"}]}], "affected": [{"vendor": "Google Cloud", "product": "Cloud Run MCP", "versions": [{"status": "affected", "version": "0", "lessThan": "1.11.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.\n\n\n\nUsers must upgrade to Cloud Run MCP version 1.11.0\u00a0or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.</p><p>Users must upgrade to Cloud Run MCP version 1.11.0 or later.</p>"}]}], "references": [{"url": "https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber"}}], "credits": [{"lang": "en", "value": "lambdasawa (Tsubasa Irisawa)", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.1"}, "solutions": [{"lang": "en", "value": "Users must upgrade to Cloud Run MCP version 1.11.0 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Users must upgrade to Cloud Run MCP version 1.11.0 or later."}]}]}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Cloud Run MCP", "vendor": "Google Cloud", "versions": [{"lessThan": "1.11.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.\n\n\n\nUsers must upgrade to Cloud Run MCP version 1.11.0\u00a0or later."}], "id": "CVE-2026-85297", "lastModified": "2026-10-26T16:50:49.857", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "type": "Secondary"}]}, "published": "2026-10-26T16:17:23.090", "references": [{"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "url": "https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0"}], "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-340"}], "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "type": "Secondary"}]}