7.7
High
CVE-2026-85297 Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to…
Description
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Run MCP 1.11 | earliest → < 1.11.0 | 1.11.0 |
References
- github.com github.com
Timeline
- Published
- Last modified