{"id":"CVE-2026-85297","aliases":[],"cve":{"records":[{"id":"CVE-2026-85297","source":"GoogleCloud","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-03T16:38:16.479Z","published":"2026-10-26T14:58:30.464Z","modified":"2026-11-02T21:12:52.542Z"}],"publishers":[{"name":"GoogleCloud","role":"CNA","organizationId":"f45cbf4e-4146-4068-b7e1-655ffc2c548c","modified":"2026-10-26T14:58:30.464Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-02T21:12:52.542Z"}],"references":[{"url":"https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0","tags":[],"source":"GoogleCloud"}],"weaknesses":[{"id":"CWE-340","description":"CWE-340 Generation of Predictable Numbers or Identifiers","source":"GoogleCloud"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-02T21:12:44.146375Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Bucket Squatting in Cloud Run MCP leads to Service Account Takeover","titleSource":"GoogleCloud","descriptionSource":"GoogleCloud","description":"Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.\n\n\n\nUsers must upgrade to Cloud Run MCP version 1.11.0 or later.","score":7.7,"severity":"high","published":"2026-10-26T14:58:30.464Z","modified":"2026-11-02T21:12:52.542Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Google Cloud","name":"Cloud Run MCP","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.11.0","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"GoogleCloud","url":"https://www.cve.org/CVERecord?id=CVE-2026-85297"}],"remediation":[{"text":"Users must upgrade to Cloud Run MCP version 1.11.0 or later.","source":"GoogleCloud","url":"https://www.cve.org/CVERecord?id=CVE-2026-85297"}],"references":["https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0"],"sources":[{"name":"CVE","id":"CVE-2026-85297","modified":"2026-11-02T21:12:52.542Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-85297"}],"assessments":[{"source":"GoogleCloud","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber","score":7.7}],"sourceAffected":[],"observedAt":"2026-11-02T21:21:02.688Z","kev":{"status":"not-listed","checkedAt":"2026-11-05T09:05:32.829Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-02T21:25:33.408Z","attemptedAt":"2026-11-02T21:25:33.408Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-02T21:25:33.100Z","attemptedAt":"2026-11-02T21:25:33.100Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-02T21:25:32.657Z","attemptedAt":"2026-11-02T21:25:32.657Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-02T21:25:33.400Z","attemptedAt":"2026-11-02T21:25:33.400Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-109906","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109906","modified":"Oct 26, 2026, 2:58:30 PM","score":7.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber","checkedAt":"2026-11-02T21:25:32.657Z"},{"source":"GitHub Advisory Database","id":"GHSA-cg86-fr78-hv98","url":"https://github.com/advisories/GHSA-cg86-fr78-hv98","modified":"2026-10-26T18:33:03Z","checkedAt":"2026-11-02T21:25:33.100Z"},{"source":"FIRST EPSS","id":"CVE-2026-85297","url":"https://www.first.org/epss/","probability":0.00314,"percentile":0.24306,"date":"2026-11-02","checkedAt":"2026-11-02T21:25:33.400Z"},{"source":"NVD","id":"CVE-2026-85297","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85297","modified":"2026-10-26T16:50:49.857","score":7.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","checkedAt":"2026-11-02T21:25:33.408Z"}],"aiSummary":{"text":"Google Cloud Run MCP versions prior to 1.11.0 are affected by Bucket Squatting, allowing an attacker to access source code and data. The weakness is due to predictable numbers or identifiers generation. Users must upgrade to version 1.11.0 or later.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:48:53.490Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-85297"}]}}