Read the docs
TI-2026-80450 Aliases CVE-2026-85297GHSA-cg86-fr78-hv98

Bucket squatting in Cloud Run MCP leads to service account takeover

Priority LOW 35CWE-340Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Google Cloud Run MCP versions from 0 before 1.11.0 on Google Cloud Platform contain a bucket squatting flaw tied to predictable identifiers (CWE-340). An attacker can create a storage bucket with a predictable name before the legitimate one exists, so the tool's data is redirected to the attacker. A remote attacker who needs user interaction can intercept and access proprietary source code, execute arbitrary code and exfiltrate data.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00314 24th percentileScored 2026-11-07
Fix Fixed Cloud Run MCP (Google Cloud): 1.11.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GoogleCloud Run MCPbefore 1.11.01.11.0Patch availableCNA
  • Cloud Run MCP VendorGoogle Affected before 1.11.0 Fixed in 1.11.0 Patch available CNA

Remediation

Upgrade Google Cloud Run MCP to version 1.11.0 or later, which fixes the flaw. The sources list no fixed version for any other release.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

  • Fix · CNA Cloud Run MCP (Google Cloud) Fixed in 1.11.0

Timeline

  1. 2026-10-26 Threatist record created from CVE-2026-85297
  2. 2026-10-27 Alias added: GHSA-cg86-fr78-hv98
  3. 2026-10-27 Priority changed: MEDIUM → LOW
  4. 2026-11-02 CISA SSVC decision points changed

References

Other 1

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 17247 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences