CVE-2026-19407:詳細資料

CVE-2026-19407

2026-09-15
16h17 +00:00
A02-Cryptographic Failures
2026-09-21
19h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-330 Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

參考資料