Record · corpus.blog/posts/01a08759-f421-726f-87e3-e68fd6e2d3f7

StubZero: $148,337 RCE in Google Cloud Production

brutecat.com · published 22 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at brutecat.com Wayback capture

2blogs citing

First cited: 27 May 2026
Most recent: 11 Jun 2026
Rank this month: not ranked
Links from this post: 16
Words captured: 9,736

Cited by

Blog

In the post

Date

michaeldalton.au

Hacking Google with A.I. for $500,000 (co-author) Read at the source ↗

11 Jun 2026

PentesterLab

Research Worth Reading - Week 21, 2026 Read at the source ↗

27 May 2026

Links from this post

Link

Host

https://www.cve.org/CVERecord?id=CVE-2026-2031

cve.org

https://gist.github.com/eyecatchup/2d700122e24154fdc985b7071ec7764a

gist.github.com

https://cloud.google.com/spanner

cloud.google.com

https://cloud.google.com/application-integration

cloud.google.com

https://sre.google/sre-book/production-environment/

sre.google

https://cloud.google.com/docs/security/beyondprod

cloud.google.com

https://www.ezequiel.tech/p/36k-google-app-engine-rce.html

ezequiel.tech

https://www.usenix.org/system/files/login/articles/login_winter16_05_cittadini.pdf

usenix.org

https://bughunters.google.com/profile/57154734-5ce9-431a-b0c3-ca3ba28bb499

bughunters.google.com

https://www.gstatic.com/_/pantheon-platform/_/js/k=pantheon-platform.r_ffqsputwh.en_US.gfcqeedabC0.O/ck=pantheon-platform.r_ffqsputwh.M74CJWSkfgQ.L.W.O/am=AAAAAAAAAQ/d=0/rs=ALa0V2PM3qwkJsQayfzRJaJ2GniB6mlGVw/m=sy1u,sy2o,sy65,sy1v,sy2m,sy2k,sy2n,sy2p,sy2q,sy2x,sy6l,sy6n,sy66,sy3x,sy6i,syo1,syo6,syo5,sy34,syj,syo,sy1z,sy2l,sybx,sy71,sy5m,syep,syes,sy6u,sy6m,sy6k,syi7,syo7,syo4,sy10,sy35,sy5b,sye2,sy2d,syt,sys,sydn,syg4,sy6z,syn,sy20,syg8,syjq,syjp,syjv,sy5h,sy86,sybo,syek,syeo,syeq,syen,syer,syet,syeu,syev,syew,syex,syey,sy4,sy68,sye3,synv,syof,syoe,syor,syox,syov,sy31,sy4l,sy8b,sy6w,sy8f,syb9,sya,sy95,syc3,syds,sypc,syph,sy6o,sy6p,sy8d,sy8e,sy4r,syo3,sy1m,syei,syjh,syp6,sy3g,sy2r,sy11,sy2b,sy33,syb3,syd4,sy5c,sy5d,sy2i,sye9,sy2e,sy2f,sy2g,sy2h,sy1p,syv,sy4w,syr,sy58,sy59,sydm,sydo,sydp,sydq,sygh,sygk,sy8m,syjr,syk7,syhd,syem,sylk,syod,syog,syok,syop,syos,syot,syoz,syp0,syow,syoy,syhc,sy54,synz,sy3b,sy4k,sy4p,sy8g,synp,sypb,syct,sy5n,syhy,sypg,sy6q,sy8c,sydj,syb7,syc8,syoc,syp5,syp8,sye,sy26,sy87,sya4,syo2,syoi,syon,syp9,sy1y,sy2j,sy44,sy6e,sy99,sy9c,syb8,syc1,sye7,sye8,syed,syoj,sypd,sy2c,sy1w,sy1q,syw,sy19,sy1s,sy48,sy4b,sy4x,sy8i,sybr,syck,sydl,sye6,syfm,syfv,sygj,sygl,sygp,syhe,syj8,syjs,sykz,syl1,syl2,synb,synn,syoq,sypv,sypw,syq5,syqa,sy1r,sy4s,sy6s,sy8o,syaj,syha,synq,sypm,sypn,sycu,syp1,sy5o,sypi,cc5GEc,sy6r,sy6t,sy8h,sy9l,sya2,syaa,syb2,sybb,sybd,sybf,sybh,sybj,sybk,syc0,syc9,sycd,sydf,syg5,synx,NTA1Nc,syoa,syoo,syou,syp4,SUXzGf,a1YRQd,syp7,n5B0Gd,sypf,sypz,syq7,syq6,syq3,syqb,syq8,syq4,syii,sy6c,sy93,sy9s,syah,syam,sybp,syc4,syc5,syob,syol,syp2,sypk,syq1,syq2,syq9,CiTGSe

gstatic.com

https://www.ezequiel.tech/

ezequiel.tech

https://github.com/ezequielpereira/GAE-RCE/blob/c58ccd52d9204a0e5b8c7cf9b82b8e6e06d524a8/protos/net/rpc/serverstatus.proto

github.com

https://docs.cloud.google.com/application-integration/docs/reference/rest

docs.cloud.google.com

https://docs.cloud.google.com/application-integration/docs/test-cases

docs.cloud.google.com

https://bughunters.google.com/about/rules/google-friends/cloud-vulnerability-reward-program-rules

bughunters.google.com

https://google.aip.dev/160

google.aip.dev