VulnerabilityPublished
Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
Source Palo Alto Unit 42
0
Severity
HighRated High by Threat Radar from the Palo Alto Unit 42 text
Data as of 22 Jun 2026, 17:15 UTC
What to do
AI-suggested
Until an official fix is released, users should monitor vendor communications and consider restricting permissions related to bucket creation and model uploads where possible. Avoid using untrusted or shared buckets for model uploads to reduce exposure.
Description
Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE appeared first on Unit 42 .
References
Community reviews
Loading reviews…