What is GHSA-wh2j-26j7-9728?

GHSA-wh2j-26j7-9728 is a security advisory published by GitHub Security Advisories with High severity. Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming

Which CVE IDs does GHSA-wh2j-26j7-9728 cover?

GHSA-wh2j-26j7-9728 covers the following CVE IDs: CVE-2026-2473. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wh2j-26j7-9728?

GHSA-wh2j-26j7-9728 affects 1 product, including: pip/google-cloud-aiplatform:\u003e= 1.21.0, \u003c 1.133.0.

GHSA-wh2j-26j7-9728High

Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming

Vendor

GitHub Security Advisories

Published

February 20, 2026

Last Modified

February 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-2473 →

📋 Description

Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictably named Cloud Storage buckets (Bucket Squatting).

This vulnerability was patched and no customer action is needed.

🎯 Affected products1

pip/google-cloud-aiplatform:>= 1.21.0, < 1.133.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-2473
https://docs.cloud.google.com/support/bulletins#gcp-2026-012
https://github.com/googleapis/python-aiplatform/releases/tag/v1.133.0
https://github.com/advisories/GHSA-wh2j-26j7-9728