{"id":"CVE-2026-85267","revision":"c58e31ac7fa54590b0da6e1353dd5d21","records":[{"revision":"c58e31ac7fa54590b0da6e1353dd5d21","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-85267","aliases":[],"title":"Cross-Site WebSocket Hijacking in Google Cloud Shell","description":"A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request.\n\n\nThis vulnerability was patched on 22 July 2026, and no customer action is needed.","state":0,"publishedAt":"2026-10-20T09:16:56.533+00:00","modifiedAt":"2026-10-20T19:06:21.384+00:00","affected":[{"ecosystem":"Vendor product","name":"Cloud Shell","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Google Cloud\",\n                    \"product\": \"Cloud Shell\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2026-07-22\",\n                            \"versionType\": \"date\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Clear","score":8.7,"severity":"HIGH"}],"references":["https://docs.cloud.google.com/shell/docs/release-notes#July_28_2026"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-85267","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-85267","identifiers":["CVE-2026-85267"]},"retained":false,"historicalAffected":[]}],"coverage":[]}