CVE-2026-19407— GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK
Quick assessment
Affected
Google Cloud Gemini Enterprise Agent Platform SDK for Python
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Google Cloud Gemini 企业版 Agent Platform 的 Python SDK 在 1.166.1 之前的版本存在“桶抢占（Bucket Squatting）”漏洞，攻击者可借此实现远程代码执行（RCE）以及窃取租户-项目级访问令牌。
Possible ATT&CK Techniques 3 AI
T1531 · Account Access Removal T1140 · Deobfuscate/Decode Files or Information T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Google Cloud | Gemini Enterprise Agent Platform SDK for Python | 1.16.0< 1.165.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19407
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK
Source: CVE Program / CVE List V5
Vulnerability Description
Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Clear
Source: CVE Program / CVE List V5
Vulnerability Type
使用不充分的随机数
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Google Cloud | Gemini Enterprise Agent Platform SDK for Python | 1.16.0 ~ 1.165.1 | - |
|
II. Public POCs for CVE-2026-19407
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19407
请登录查看更多情报信息。
Vendor Pages for CVE-2026-19407 (1)
IV. Related Vulnerabilities
Same vendor: Google Cloud
-
CVE-2026-19486
SSRF in Gemini Enterprise Agent Platform App Builder -
CVE-2026-13745
Arbitrary Code Execution in Gemini CLI via Symlinked Environ -
CVE-2026-79696
Remote Code Execution in Google ADK for Python via Incomplet -
CVE-2026-4644
Improper Authorization in Google Cloud Integration Connector -
CVE-2026-79707
Arbitrary File Read in Google Agent Development Kit (ADK)
Same weakness: CWE-330
-
CVE-2026-92913
AVideo Weak PRNG Activation Code Authentication Bypass -
CVE-2026-92912
AVideo Cryptographically Weak PRNG via uniqid Stream Key -
CVE-2026-86187
WWBN AVideo Weak PRNG Password Generation via External Login -
CVE-2026-17274
IBM i is Affected By Multiple Vulnerabilities in Debug Serve -
CVE-2026-3416
Predictable Pseudorandom Number Generation via Webhook HMAC
V. Comments for CVE-2026-19407
No comments yet