CVE-2026-2473: Google Cloud Vertex AI Predictable Bucket Naming Vulnerability
Summary
CVE-2026-2473: Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming. Affects google-cloud-aiplatform versions >= 1.21.0, < 1.133.0. Fixed in 1.133.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Google Cloud Vertex AI is a robust platform that facilitates the development and deployment of machine learning models. It provides tools for managing data, training models, and deploying them for predictions. However, a vulnerability has been identified in the 'google-cloud-aiplatform' package, specifically in its handling of Cloud Storage bucket naming, which can lead to severe security risks.
Vulnerability Detail
The vulnerability arises from predictable bucket naming in Vertex AI Experiments, allowing unauthenticated remote attackers to pre-create Cloud Storage buckets with predictable names. This can lead to cross-tenant remote code execution, model theft, and poisoning. The issue affects versions from 1.21.0 up to (but not including) 1.133.0, highlighting a significant security flaw that can be exploited without authentication.
How To Fix
Minimum fixed version
1.133.0
This is the first release that contains the fix.
pip install --upgrade "google-cloud-aiplatform==1.133.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to update to the patched version as soon as possible.
Conclusion
In summary, CVE-2026-2473 is a significant vulnerability in the Google Cloud Vertex AI platform that can lead to severe security breaches. It is essential to update the 'google-cloud-aiplatform' package to version 1.133.0 or later to protect your application from potential attacks.
See every vulnerability recorded for google-cloud-aiplatform →
FAQ
CVE-2026-2473 is a vulnerability in Google Cloud Vertex AI that involves predictable bucket naming, allowing attackers to exploit it for unauthorized access.
If your application uses the affected versions of the 'google-cloud-aiplatform' package, it may be at risk of cross-tenant remote code execution and model theft.
The vulnerability affects versions from 1.21.0 up to (but not including) 1.133.0 of the 'google-cloud-aiplatform' package.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
While there are no specific workarounds, it is crucial to prioritize updating the package to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for google-cloud-aiplatform.
