Google Cloud VRP adds $250,000 root-in-cloud reward for full tenant or project takeover
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward of $250,000 for research that achieves full administrative control of Google Cloud. To qualify, a researcher must show roles/owner privileges or complete IAM control over arbitrary Google Cloud organizations or projects. The exploit path must not rely on pre-existing project access, previously compromised credentials, or user interaction and social engineering. Reports demonstrating remote code execution in Borg, Google's production infrastructure, or root-in-production will also be considered. Google frames the reward as recognition of high-impact architectural research, and says AI-assisted (agentic) tooling is helping researchers find more interesting bugs.
Detalhes técnicos
- Validation is based on Google's analysis of the initial entry point, execution context and attack surface, which must show that full arbitrary tenant or project takeover is possible.
- Researchers must stop all probing immediately upon achieving any execution in Borg. Escalation, extraction of production credentials and lateral movement are prohibited and lead to disqualification (Google Cloud CISO Chris Betz).
- Google built a deterministic proof-of-root mechanism around a designated service account, so researchers can cryptographically prove unauthorized access against that identity instead of testing against real customer projects (VRP lead Michael Cote).
Remediação
No vulnerability or exploitation is reported, so no defensive action is required. Researchers should follow the published Cloud VRP rules of engagement.
Linha do tempo
-
Google Cloud VRP adds $250,000 root-in-cloud reward for full tenant or project takeover
ler a análise desta fonte ocultar
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward of $250,000 for research that achieves full administrative control of Google Cloud. To qualify, a researcher must show
roles/ownerprivileges or complete IAM control over arbitrary Google Cloud organizations or projects. The exploit path must not rely on pre-existing project access, previously compromised credentials, or user interaction and social engineering. Reports demonstrating remote code execution in Borg, Google's production infrastructure, or root-in-production will also be considered. Google frames the reward as recognition of high-impact architectural research, and says AI-assisted (agentic) tooling is helping researchers find more interesting bugs.Technical Details
- Validation is based on Google's analysis of the initial entry point, execution context and attack surface, which must show that full arbitrary tenant or project takeover is possible.
- Researchers must stop all probing immediately upon achieving any execution in Borg. Escalation, extraction of production credentials and lateral movement are prohibited and lead to disqualification (Google Cloud CISO Chris Betz).
- Google built a deterministic proof-of-root mechanism around a designated service account, so researchers can cryptographically prove unauthorized access against that identity instead of testing against real customer projects (VRP lead Michael Cote).
Remediation
No vulnerability or exploitation is reported, so no defensive action is required. Researchers should follow the published Cloud VRP rules of engagement.