Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
A vulnerability in the Google Cloud Vertex AI SDK for Python allowed an attacker to take control of the victim's machine learning model upload and execute code inside Google's serving infrastructure without having access to the victim's project.
Palo Alto Networks Unit 42, which discovered and reported the vulnerability via Google's bug bounty program, refers to the method as "Pickle in the Middle" and reports that it has not observed any exploitation in the wild. Update to version 1.148.0 or above if you use the SDK because Google has fixed problem.
All the attacker required was the victim's project ID, which is frequently public, and their own Google Cloud project. No phishing, no passwords, and no access to the target.
The SDK's selection of a temporary Cloud Storage bucket fo...