CVE-2026-19407:详情

CVE-2026-19407

2026-09-15
16h17 +00:00
A02-Cryptographic Failures
2026-09-21
19h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-330 Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

参考资料