CVE-2026-85297

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows…

Risk score: 51/100
CVSS: 7.7 v4.0
Published: 26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
Affected: See advisory
Fix: Upgrade the product to 1.11.0 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.7 high
Remotely exploitable without logging in

References

https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0

Original description

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Last activity 26 Oct 2026. Patch Forecast updates every hour.