Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to
    (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve
    cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud
    Storage buckets (Bucket Squatting). This vulnerability was patched and no customer action is needed.
    (CVE-2026-2473)

ID	Name	Product	Family	Type	Severity
459006	Echo: google-cloud-aiplatform: security update to 1.133.0	Tenable Cloud Security	Echo Local Security Checks	Local	high
459006	Echo: google-cloud-aiplatform: security update to 1.133.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
437915	SCA: security update for google-cloud-aiplatform (GHSA-wh2j-26j7-9728)	Tenable Cloud Security	SCA Checks	Local	high
437915	SCA: security update for google-cloud-aiplatform (GHSA-wh2j-26j7-9728)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-2473

high

Tenable Plugins

high

high

high

high