High nvd · CVE-2026-19407

CVE-2026-19407: Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an att

Published Sep 15, 2026 CVSS 7.7

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

Remote Code Execution

Affected AI Products

gemini

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.