Threats·Cloud & SaaSCriticalGoogle Cloud Run Metadata Service SSRF Filter Bypass Enables IAM Service Account Token ExfiltrationA security flaw in Google Cloud Run's internal metadata proxy allows server-side request forgery to steal workload identity IAM tokens.CST Newsroom10 Oct 20268 min read
