Addressed Google Cloud Run flaw could trigger info leaks

Google Cloud Run vulnerability exposed by Tenable Research

Tenable Research has uncovered a vulnerability in Google Cloud Run, named ImageRunner, which could allow attackers to access private container images.

New Vulnerability in GCP Cloud Run Shows Why Least Privilege Isn’t Enough

A newly disclosed vulnerability dubbed ImageRunner, uncovered by Tenable Research, exposed a subtle yet powerful privilege escalation pathway in Google Cloud Platform’s Cloud Run service. The vulnerability, now patched by Google, enabled attackers with minimal permissions to illegitimately access and deploy private container images, effectively bypassing standard access control boundaries within a GCP environment. Understanding the Vulnerability…

Addressed Google Cloud Run flaw could trigger info leaks

Sensitive data compromise could have been achieved through the exploitation of the recently patched Google Cloud Run privilege escalation flaw dubbed "ImageRunner," according to SecurityWeek. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your enrollment helps support this platform at…

Cloud vulnerability exploitation: a wake-up call for security teams amid rising automation? - CybersecAsia

A recently-fixed privilege-escalation flaw has exposed critical risks in cloud service interdependencies and automatic service agents that could cause cascading vulnerabilities As cloud environments grow more complex, security teams must anticipate and mitigate risks before attackers exploit them. A recent case in point is the discovery of a privilege escalation vulnerability in Google’s serverless container platform, that could have allowed att…

Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access Via IAM Misuse - Cybernoz - Cybersecurity News

Apr 02, 2025Ravie LakshmananCloud Security / Vulnerability Cybersecurity researchers have disclosed details of a now-patched privilege escalation vulnerability in Google Cloud Platform (GCP) Cloud Run that could have allowed a malicious actor to access container images and even inject malicious code. “The vulnerability could have allowed such an identity to abuse its Google Cloud Run revision edit permissions in order to pull private Google A…