National Cyber Warfare Foundation (NCWF)

Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse


0 user ratings
2025-04-02 14:11:14
milo
Blue Team (CND)
Cybersecurity researchers have disclosed details of a now-patched privilege escalation vulnerability in Google Cloud Platform (GCP) Cloud Run that could have allowed a malicious actor to access container images and even inject malicious code.
"The vulnerability could have allowed such an identity to abuse its Google Cloud Run revision edit permissions in order to pull private Google Artifact



Source: TheHackerNews
Source Link: https://thehackernews.com/2025/04/google-fixed-cloud-run-vulnerability.html


Comments
new comment
Nobody has commented yet. Will you be the first?
 
Forum
Blue Team (CND)



Copyright 2012 through 2025 - National Cyber Warfare Foundation - All rights reserved worldwide.