Google CloudCVE-2026-19407

Google Cloud Gemini Enterprise Agent Platform SDK: remote code execution

CVE-2026-19407 · Published Sep 15, 2026 · updated Sep 21, 2026

High7.7

Fix: upgrade to 1.165.1 or later

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

Affected versions

Package	Affected	Fixed in
Gemini Enterprise Agent Platform SDK for Python Product	>= 1.16.0, < 1.165.1	1.165.1

Details and references

CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-330

More Google Cloud advisories

All Google Cloud

Critical 9.4Sep 28

Google Cloud Application Integration: improper authorizationCVE-2026-19759fixed in 2026-06-17 High 8.7Sep 11

Google Cloud Gemini Enterprise: server-side request forgeryCVE-2026-19486fixed in 2026-06-01 High 7.7Sep 10

Google Cloud Gemini CLI: code executionCVE-2026-13745fixed in 0.39.1 Critical 10.0Sep 9

Google Cloud Agent Development Kit (ADK) for Python: code injectionCVE-2026-79696fixed in 2.7.0 High 8.7Sep 4

Google Cloud Agent Development Kit (ADK): path traversalCVE-2026-79707fixed in 1.22.0 High 8.5Sep 4

Google Cloud Integration Connectors: missing authorizationCVE-2026-4644fixed in 2025-12-11