VDB

GCVE-110-CLOUD-2024-0026

GCVE-110-CLOUD-2024-0026
Advisory Published
Vulnetix · Advisory published July 24, 2024
A privilege escalation vulnerability dubbed "ConfusedFunction" was discovered in Google Cloud Platform's Cloud Functions service. It allows attackers to escalate privileges from Cloud Function permissions to the default Cloud Build service account during function deployment. The vulnerability affects both first and second-generation Cloud Functions.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
GCPCloud Functions——
GCPCloud Services——
GCPCloud Build——
GCPCloud Functions, Cloud Build——

References

GCP Cloud Functions Privilege Escalation Vulnerability
advisory
advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›