---
id: CVE-2026-85297
title: Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
summary: >-
  Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google
  Cloud Platform allows an attacker to intercept and access proprietary source
  code, execute arbitrary code and exfiltrate data.




  Users must upgrade to Cloud Run…
severity: high
cvss: 7.7
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber'
cvssSource: cna
cwe:
  - CWE-340
vendor: Google Cloud
product: Cloud Run MCP
affected:
  - cloud_run_mcp < 1.11.0
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T14:58:30.464Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-85297'
references:
  - url: 'https://github.com/GoogleCloudPlatform/cloud-run-mcp/releases/tag/v1.11.0'
tags:
  - cve.org
ingestedAt: '2026-10-26T15:29:30.504Z'
---

## Overview

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.



Users must upgrade to Cloud Run MCP version 1.11.0 or later.

## Affected

- `cloud_run_mcp < 1.11.0`

## Remediation

Users must upgrade to Cloud Run MCP version 1.11.0 or later.