Vulnerability · Published Feb 26, 2026 · Assigned by GoogleCloud
CVE-2026-2244Sensitive Data Exposure in Google Cloud Vertex AI Workbench
High 8.4
In plain English
A high-severity information exposure in Vertex AI Workbench from Google Cloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Official description
A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a built-in startup script. All instances after January 30th, 2026 have been patched to protect from this vulnerability. No user action is required for this.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Google Cloud | Vertex AI Workbench | 7/21/2025 – before 01/30/2026 |
Weakness: CWE-200 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/U:Clear