Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate their privileges in the Cloud Composer workflow orchestration service that's based on Apache Airflow. "This vulnerability lets attackers with edit permissions in Cloud Composer to escalate their access to the default Cloud Build service account, which
source https://thehackernews.com/2025/04/gcp-cloud-composer-bug-let-attackers.html
Tuesday, April 22, 2025
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box