Token Exfiltration Vulnerability in Google Cloud Vertex AI Workbench
CVE-2026-2244

8.4HIGH

Key Information:

Vendor

Google Cloud

Status
Vertex Ai Workbench
Vendor
CVE Published:
26 February 2026

What is CVE-2026-2244?

A vulnerability in Google Cloud Vertex AI Workbench allows an attacker to exfiltrate valid Google Cloud access tokens of other users through the exploitation of a built-in startup script. This security flaw existed in instances deployed between July 21, 2025, and January 30, 2026. Following this date, instances have been patched to mitigate the risk of token abuse, ensuring that user credentials remain secure without requiring any action from users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Vertex AI Workbench 7/21/2025 < 01/30/2026

References

https://docs.cloud.google.com/vertex-ai/docs/workbench/re...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Moshe Bernstein with Tenable
JSON
.