CVE-2026-85297 — Vulnerability intelligence

—

Published: 2026-10-26T16:17:23.090

CVSS

7.7

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

Sources

• CVE-2026-85297
• Original advisory