Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting).
This vulnerability was patched and no customer action is needed.
This vulnerability was patched and no customer action is needed.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Github GHSA |
GHSA-wh2j-26j7-9728 | Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://docs.cloud.google.com/support/bulletins#gcp-2026-012 |
|
History
Fri, 20 Feb 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed. | |
| Title | Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft. | |
| Weaknesses | CWE-340 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: GoogleCloud
Published:
Updated: 2026-02-20T19:39:51.015Z
Reserved: 2026-02-13T15:41:59.549Z
Link: CVE-2026-2473
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-20T20:25:24.497
Modified: 2026-02-20T20:25:24.497
Link: CVE-2026-2473
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses