CVE-2026-85297: Cloud Run MCP cloud build bucket ownership validation

Evidence record

CVE-2026-85297: Cloud Run MCP cloud build bucket ownership validation

Read the original source ↗

Claim-level citations (2)

• supportsCloud Run MCP deployment could upload project source to a preclaimed bucket: The public advisory names Cloud Run MCP versions before 1.11.0 as susceptible to bucket squatting and instructs deployments to upgrade, but does not enumerate exploited cloud projects or victims.

  CVE-2026-85297, Description and references to v1.11.0 release

• supportsCloud Run MCP deployment could upload project source to a preclaimed bucket: The advisory reports that an attacker could precreate the globally unique Cloud Storage bucket expected by cloud-run-mcp and cause subsequent project files to be uploaded to a bucket it controlled. The patched version is 1.11.0.

  Description, predictable bucket calculation, remediation and patched version