GCVE-110-CLOUD-2021-0010

Advisory Published

Vulnetix · Advisory published October 18, 2021

Multiple vulnerabilities were found in Google Cloud SQL, including config file injection leading to RCE, information disclosure in the Cloud SQL Auth Proxy, and a design issue in Postgres IAM authentication allowing access token theft. Other issues included GCR permission misconfigurations and potential for terminal escape sequence injection attacks via gcloud.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
GCP	Cloud SQL	—	—
GCP	Cloud Services	—	—

References

Exfiltrate data via the logs of GCP Org policy

advisory

Cloud SQL vulnerabilities in Google's RDS offering

advisory

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON