GitHub Advisoryadvisory · PyPI

GHSA-wh2j-26j7-9728 Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming

HIGH Published 2026-02-20 Modified 2026-02-20 Official page ↗
Aliases
CVE-2026-2473
Ecosystem
PyPI
Packages
google-cloud-aiplatform
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear
Weaknesses
CWE-340
Reviewed
2026-02-20

Affected packages

• PyPI google-cloud-aiplatform: >= 1.21.0, < 1.133.0 → fixed in 1.133.0

Description

Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed.

Related

Alias · CVE (1)

  • CVE-2026-2473 Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on… vulnerability

Weakness · CWE (1)

  • CWE-340 Generation of Predictable Numbers or Identifiers weakness

References