CVE-2026-19407
GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.
| CWE | CWE-330 |
| Vendor | google cloud |
| Product | gemini enterprise agent platform sdk for python |
| Published | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for google cloud gemini enterprise agent platform sdk for python
Be the first to know when new unknown vulnerabilities affecting google cloud gemini enterprise agent platform sdk for python are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google Cloud / Gemini Enterprise Agent Platform SDK for Python
1.16.0 < 1.165.1
References
Credits
🔍 Ori Hadad