Attributed metadata history

Up to 100 retained publisher events per page for eea1a13e4f89c730f7393c6c24ed3123cc86a5b90fcccfa7bd167d4b4e7b982a. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:04 UTC

GCP provides an OS Login service for managing SSH access to compute instances using IAM roles. An attacker could abuse this feature via LXD, Docker (if available on the target system) and DHCP poisoning of the metadata server to escalate their privileges on a Google Compute Engine VM.

Fingerprint: 48e962cd74eab96531563847b51765fda88ba908ba1bc5e55ca5524d325aba3e

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c