cloud_shell vulnerabilities

CVEs whose affected-version data names the cloud_shell package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85267High· 8.7

today

Cross-Site WebSocket Hijacking in Google Cloud Shell

A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cr…

▾ TwilightGoogle Cloud · Cloud Shellvia CVEORG