VYPR

Cloud Shell

by Google Cloud Platform

CVEs (1)

  • CVE-2026-85267HigOct 20, 2026
    risk 0.57cvss —epss —

    A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This…