Skip to content
OpenAdvisories

Package · PyPI

google-cloud-aiplatform

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.7
    CVE-2026-2473

    Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft.

    Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, a…

    Google Cloud Vertex AI Experiments google-cloud-aiplatform PyPI
  • High 8.6
    CVE-2026-2472 Public exploit

    Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

    Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaSc…

    Google Cloud Vertex AI SDK for Python google-cloud-aiplatform PyPI