Cloud Run Mcp
Monthly
Bucket squatting in Google Cloud Run MCP before 1.11.0 lets an unauthenticated remote attacker who pre-registers a predictable Cloud Storage bucket intercept proprietary source code staged by the tool, tamper with deployments to execute arbitrary code, and exfiltrate data. Real-world urgency is tempered below the raw CVSS 4.0 base score of 7.7 because the attacker must claim the predictable bucket before the tool does and a developer must then run a deployment through the vulnerable instance. No CISA KEV entry or public exploit was identified at time of analysis, and the vendor's stated fix is upgrading to 1.11.0 or later.
Bucket squatting in Google Cloud Run MCP before 1.11.0 lets an unauthenticated remote attacker who pre-registers a predictable Cloud Storage bucket intercept proprietary source code staged by the tool, tamper with deployments to execute arbitrary code, and exfiltrate data. Real-world urgency is tempered below the raw CVSS 4.0 base score of 7.7 because the attacker must claim the predictable bucket before the tool does and a developer must then run a deployment through the vulnerable instance. No CISA KEV entry or public exploit was identified at time of analysis, and the vendor's stated fix is upgrading to 1.11.0 or later.