Google Cloud's MCP Toolbox and Cloud Run MCP open file exfiltration and GCS bucket-squatting paths
Empty allow-lists still mean allow-all after upgrade, and a predictable _cloudbuild bucket lets squatters own the upload path first.
Read the pieceOne published Frontier piece on this subject — open it below.
1 article · Full archive · Topics
This tag currently points at a single story.
Empty allow-lists still mean allow-all after upgrade, and a predictable _cloudbuild bucket lets squatters own the upload path first.
Read the pieceNew releases, then the constraint.