Cross‑tenant RCE in Google Vertex AI SDK: bucket squatting lets attackers hijack model uploads
A flaw in Google Cloud’s Vertex AI Python SDK let an attacker pre‑create the SDK’s deterministic staging bucket, hijack a victim’s model upload, inject malicious code, and achieve remote code execution on the target’s serving infrastructure. The bug, fixed in SDK v1.148.0, underscores the danger of predictable bucket names in shared cloud services.