Researcher at Dig security discovered a critical flaw in Google Cloud Platform's (GCP) database service that could allow attackers to gain access to sensitive data and potentially customer environments. The vulnerability allows for a multi-step process leading to the escalation of initial privileges, granting a malicious user system admin-level control. The issue was fixed in April through Google's bug bounty program. GCP customers are advised to use data security posture management (DSPM) solutions to locate sensitive data and prevent potential exploits.
















