VulnSocial

CVE-2026-2244Disclosure

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a built-in startup script. All instances after January 30th, 2026 have been patched to protect from this vulnerability. No user action is required for this.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-02-26); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-02-26: 1Mentions · 2026-03-01: 1Mentions · 2026-07-14: 1Patch / Workaround · 2026-03-01: 1Technical Details · 2026-02-26: 1Technical Details · 2026-03-01: 1Technical Details · 2026-07-14: 102-2603-0107-14
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-261
Disclosure1
2026-03-011
Patch1
2026-07-141
Disclosure1
Full discourse3 posts
  • Cloud Village@cloudvillage_dc
    Disclosure

    What if the biggest threat to your cloud environment is a project you don’t even know you’re part of? ☁️⚠️ Join Moshe Bernstein (@_mbernstein) at #CloudVillage on August 8th for a deep dive into the design flaw behind the Vertex AI Workbench vulnerability (CVE-2026-2244). We’re dissecting a novel cross-tenant account takeover that broke the IAM permission model. ⚡ Lightning Talk: Whose Resource Is It Anyway? The Design Flaw That Breaks the IAM Permission Model 🎤 Speaker: Moshe Bernstein 🗓️ Date: August 8th ⏰ Time: 12:00 - 12:20 PT #DEFCON34 #HackerSummerCamp #CloudSecurity #GCP #VertexAI #IAM #CloudNative

    Post summary

    The tweet announces an upcoming talk to discuss the newly disclosed CVE‑2026‑2244, a cross‑tenant account takeover flaw in Vertex AI Workbench that compromises the IAM permission model.

    01040339
    5.7K followersView on X
  • Nikhil Raj@iam_nikhil_raj
    Patch

    High Severity (CVSS 8.4): Vulnerability allowed attackers to exfiltrate GCP access tokens via abuse of a built-in startup script in Vertex AI WorkbenchPatched: All instances after Jan 30, 2026 are protected. NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-2244 #GoogleCloud #DevSecOps

    Post summary

    CVE-2026-2244 is a high‑severity vulnerability that allowed attackers to exfiltrate GCP access tokens via a startup script abuse in Vertex AI Workbench, but all instances are patched after Jan 30, 2026.

    0000052
     View on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2244 A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via ab… https://www.cve.org/CVERecord?id=CVE-2026-2244

    Post summary

    The CVE describes a token exfiltration flaw in Google Cloud Vertex AI Workbench, but no PoC, exploit, or patch details are provided.

    00000118
    56.6K followersView on X

Explore more

Back to dashboard