IAM Privilege Escalation

Google Vertex AI Agent Builder Flaw Enables Recursive Tool-Call Sandbox Breakout and Cloud IAM Token Exfiltration (CVE-2026-76215)

Google patches a critical breakout flaw in Vertex AI Agent Builder (CVE-2026-76215) allowing recursive tool invocations to escape sandboxes and exfiltrate IAM tokens.