Bucket Squatting Flaw in Vertex AI SDK Enabled Model Hijack and RCE
A vulnerability in the Google Cloud Vertex AI Python SDK allowed unauthenticated attackers to intercept model uploads by pre-registering predictable staging bucket names — a technique Unit 42 calls …
AML.T0010 - ML Supply Chain Compromise
AML.T0018 - Backdoor ML Model
AML.T0031 - Erode ML Model Integrity