CVE-2026-2473

The record

Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed.

Affected packages

Related vulnerabilities

• GHSA-wh2j-26j7-9728 Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming Same vulnerability
• GHSA-qv8j-hgpc-vrq8 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) Also affects google-cloud-aiplatform
• CVE-2026-2472 Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google… Also affects google-cloud-aiplatform
• CVE-2026-64964 ATutor generates predictable email confirmation tokens due to the use of insufficiently… CWE-340
• CVE-2026-9219 Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a… CWE-340
• CVE-2026-11374 In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit… CWE-340
• CVE-2026-9733 Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure… CWE-340
• CVE-2026-9692 Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids… CWE-340