HIGHCVSS v4 7.7Vulnerability
CVE-2026-85297
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-26T19:15:24.996242+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.7
- Retrieved at
- 2026-10-26T19:17:44+00:00
- Score
- 7.7
- Cvss version
- 4.0
- Last source
- NVD
- Cve id
- CVE-2026-85297
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
- First seen by Signal
- 2026-10-26T19:10:44+00:00
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
- Published at
- 2026-10-26T16:17:23.090
- Last modified
- 2026-10-26T16:50:49.857
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph