Live › vulnerability › CVE-2026-85267
Go to dashboardGoogle Cloud Shell had a cross-site WebSocket hijacking flaw that let an attacker take over an active session. The attacker could exfiltrate the user's OAuth access token through a cross-origin WebSocket request.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Google patched this on 22 July 2026 and says no customer action is needed.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request.
This vulnerability was patched on 22 July 2026, and no customer action is needed.
This page as .md · .json · in your agent: get_signal("CVE-2026-85267")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.