Google Vertex AI Flaw Lets Low-Privilege Users Escalate to Service Agent Roles

Security researchers have discovered critical privilege escalation vulnerabilities in Google’s Vertex AI platform that allow attackers with minimal permissions to hijack high-privileged Service Agent accounts. The flaws affect the Vertex AI Agent Engine and Ray on Vertex AI, where default configurations enable low-privileged users to access powerful managed identities with project-wide permissions. As enterprises rapidly […]

The post Google Vertex AI Flaw Lets Low-Privilege Users Escalate to Service Agent Roles appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.