Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that might have enabled an attacker to raise their privileges within the Cloud Composer workflow orchestration service that is based mostly on Apache Airflow.
“This vulnerability lets attackers with edit permissions in Cloud Composer to escalate their entry to the default Cloud Construct service account, which
GCP Cloud Composer Bug Let Attackers Elevate Entry by way of Malicious PyPI Packages
