Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-1727
PUBLISHED
More InfoOfficial Page
Assigner-GoogleCloud
Assigner Org ID-f45cbf4e-4146-4068-b7e1-655ffc2c548c
View Known Exploited Vulnerability (KEV) details
Published At-06 Feb, 2026 | 21:44
Updated At-09 Feb, 2026 | 15:04
Rejected At-
▼CVE Numbering Authority (CNA)
Information Disclosure via Bucket Squatting in Google Cloud Agentspace.

The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and temporary staging during data imports from GCS and Cloud SQL. This predictability allowed an attacker to engage in "bucket squatting" by establishing these buckets before a victim's initial use. All versions after December 12th, 2025 have been updated to protect from this vulnerability. No user action is required for this.

Affected Products
Vendor
Google CloudGoogle Cloud
Product
Gemini Enterprise (formerly Agentspace)
Default Status
unaffected
Versions
Affected
  • From 0 before 12/12/2025 (date)
Problem Types
TypeCWE IDDescription
CWECWE-200CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Type: CWE
CWE ID: CWE-200
Description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Metrics
VersionBase scoreBase severityVector
4.09.1CRITICAL
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L/U:Clear
Version: 4.0
Base score: 9.1
Base severity: CRITICAL
Vector:
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L/U:Clear
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-131CAPEC-131 Resource Leak Exposure
CAPEC ID: CAPEC-131
Description: CAPEC-131 Resource Leak Exposure
Solutions

Configurations

Workarounds

Exploits

Credits

reporter
Omer Amiad
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://docs.cloud.google.com/gemini/enterprise/docs/release-notes#February_06_2026
N/A
Hyperlink: https://docs.cloud.google.com/gemini/enterprise/docs/release-notes#February_06_2026
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found