cloud_run_mcp vulnerabilities

CVEs whose affected-version data names the cloud_run_mcp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85297High· 7.7

today

Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run…

▾ TwilightGoogle Cloud · Cloud Run MCPvia CVEORG