Vulnerability Description
The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and temporary staging during data imports from GCS and Cloud SQL. This predictability allowed an attacker to engage in "bucket squatting" by establishing these buckets before a victim's initial use. All versions after December 12th, 2025 have been updated to protect from this vulnerability. No user action is required for this.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-1727?
CVE-2026-1727 is a documented vulnerability. The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and ...
How severe is CVE-2026-1727?
CVSS scoring is not yet available for CVE-2026-1727. Check NVD for updates.
Is there a patch for CVE-2026-1727?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.