// Google CloudHIGH
Google patched a critical unauthenticated remote code execution vulnerability in its shared DevSite platform that affected developers.google.com, firebase.google.com, and other Google infrastructure. The flaw allowed attackers to forge Flask session cookies with malicious Python pickle payloads after recovering exposed OAuth credentials and reused Flask secrets from signed cookies. The vulnerability was discovered by security researcher Simon Köck and patched October 7, 2026.
// Get alerts for Google Cloud