news.mlab.sh
1 result
supply-chain

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A vulnerability in the Google Cloud Vertex AI SDK allowed attackers to hijack model uploads by exploiting predictable bucket naming conventions. Attackers could create a temporary bucket in their own project, intercept the victim's model upload, and execute malicious code within Google's serving infrastructure, potenti…

The Hacker News · Jun 16, 2026 High