{"id":211,"date":"2026-10-29T07:21:47","date_gmt":"2026-10-29T07:21:47","guid":{"rendered":"https:\/\/bugskan.com\/?p=211"},"modified":"2026-10-29T07:21:48","modified_gmt":"2026-10-29T07:21:48","slug":"vertex-ai-research-questioned-the-default-reach-of-agent-service-identities","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/vertex-ai-research-questioned-the-default-reach-of-agent-service-identities\/","title":{"rendered":"Vertex AI research questioned the default reach of agent service identities"},"content":{"rendered":"<p>March 2026 reporting described Unit 42 research into Vertex AI Agent Engine service identities. The researchers showed how credentials available to a deployed agent could provide access beyond the application\u2019s intended task, including customer-project storage.<\/p>\n<p>The report distinguishes access to listed resources from permission to read them: some exposed tenant-bucket information did not grant access to bucket contents. That distinction should not be flattened into a claim that all Google Cloud data was public.<\/p>\n<p>Review the permissions of service identities attached to agent workloads and limit access to the required resources. A model-level safeguard does not replace IAM controls when code can obtain credentials inside its execution environment.<\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2026\/03\/vertex-ai-vulnerability-exposes-google.html\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unit 42\u2019s reported findings focus on service-agent permissions and the consequences of a compromised execution context.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_c1ec2392821447","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"medium","bugskan_affected_scope":"Service-agent permission paths examined in Unit 42\u2019s reported research.","bugskan_recommended_next_step":"Review agent service identities and restrict project-level data permissions.","bugskan_who_should_check":"","bugskan_material_updated_at":"2026-03-31T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[55],"class_list":["post-211","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained","bugskan_technology-vertex-ai"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=211"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/211\/revisions"}],"predecessor-version":[{"id":384,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/211\/revisions\/384"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=211"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=211"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}