Google Vertex AI SDK flaw lets attackers hijack model uploads via bucket squatting

Google’s Vertex AI SDK for Python contained a flaw that let attackers hijack machine learning model uploads and execute code inside Google’s serving infrastructure, The Hacker News reports today. The issue required no access to a victim’s Google Cloud project, raising acute supply chain risk for teams pushing models to Vertex AI. Palo Alto Networks Unit 42, which discovered the bug, dubbed the technique “Pickle in the Middle.”

According to The Hacker News, the attack abused bucket squatting during model artifact uploads, allowing interception of Python pickle files and injection of malicious payloads. Unit 42 said it reported the issue through Google’s bug bounty program and has seen no exploitation in the wild. Watch for Google advisories on remediation, SDK updates, and guidance for securing model pipelines. [Developing. This article will be updated.]