GCP-2026-058
Imported from official source
Published: 2026-09-02Description Description Severity Notes A missing project permission check in GKE Multi-Cloud (CreateAttachedCluster, CreateAwsCluster, CreateAzureCluster) APIs allowed an attacker to register an attached cluster into an arbitrary target project's Workload Identity Federation for GKE. …
This version
- Version
- 2 of 4
- Recorded
- September 17, 2026 21:30
- Change
- Imported change
- Content hash
051269ca68d2c500d8a0f3c31735e9e8- All versions
- Revision history