7.7
High
CVE-2026-19407 Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an…
Description
Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gemini Enterprise Agent Platform SDK for Python 1.16 | 1.16.0 → < 1.165.1 | 1.165.1 |
References
- docs.cloud.google.com docs.cloud.google.com
Timeline
- Published
- Last modified