Skip to content
OpenAdvisories

Product · Google Cloud

Cloud Shell

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-85267

    Cross-Site WebSocket Hijacking in Google Cloud Shell

    A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket r…

    Google Cloud Cloud Shell