Cloud SQL privilege escalation

A vulnerability discovered in GCP's Cloud SQL service could be abused
to result in complete control of the database engine and access to the
host OS. An attacker could have listed and accessed files in the host OS,
including any secrets on the machine, as well as gaining access to service
agents. However, it is unclear from the report if this level of access could
have allowed lateral movement within the Cloud SQL service or grant cross-tenant
access to other …

access cloud cloud sql control database engine escalation files gcp host machine privilege privilege escalation result secrets service sql vulnerability