[ CVE-2026-85297 · Published 26 Oct 2026 ]
Vulnerability in Google Cloud Cloud Run MCP
CVSS 7.7
EPSS <1%No fix listed yet
[ Description ]Official description
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.