Critical Google Cloud Run Flaw Fixed: How Attackers Could Steal Private Images Through IAM Weakness

A critical privilege escalation vulnerability named "ImageRunner" was discovered in Google Cloud Run by Tenable researchers. The flaw allowed attackers with edit permissions on Cloud Run revisions to access private container images without proper registry permissions, potentially enabling ...