CVE-2026-2244
High
Description
A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a built-in startup script. All instances after January 30th, 2026 have been patched to protect from this vulnerability. No user action is required for this.
SeverityHigh
CVSS8.4
Exploit probability—
Product
Vertex AI Workbench
PublishedFeb 26, 2026
First seenFeb 26, 2026
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- Google Cloud Vertex AI Workbench01/30/2026 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Cloud Vertex AI Workbench | 7/21/2025 ≤ v < 01/30/2026 | 01/30/2026 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.