Google Cloud published security bulletins for multiple products. Several Linux kernel bugs can lead to privilege escalation on Container‑Optimized OS nodes. The company also disclosed multiple Envoy and Istio vulnerabilities and a Vertex AI predictable‑bucket naming flaw that can enable cross‑tenant remote code execution, model theft, and poisoning (CVE‑2026‑2473). Google added patch/version notes for Ubuntu nodes with GKE and says no customer action is needed to mitigate the Vertex AI issue.
Part of the PlainSec briefing for 2026-04-01