Vulnerability in Google Cloud Gemini Enterprise Agent Platform Sdk For Python

CVE-2026-19407

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

Affected products

Weakness classification (CWE)

References