Skip to main content
← Back to sources

Vertex AI 'Double Agent' Vulnerability Exposes Customer Data and Google Internal Code

Published 2026-04-10AI Regulation and GovernanceHigh⭐ Timeline Candidate

Summary

A security vulnerability dubbed 'double agent' has been discovered in Google's Vertex AI platform that reportedly exposed customer data and Google's own internal code. The flaw highlights the growing attack surface of enterprise AI platforms, where multi-tenant infrastructure and complex model-serving pipelines can create unexpected vectors for data leakage and privilege escalation. This disclosure is significant for enterprises evaluating and deploying AI infrastructure, as Vertex AI is one of

Alignment: Reinforces current position
Related Positions: ai-governance-and-risk.md, ai-infrastructure-strategy.md, enterprise-ai-delivery.md
vertex-aigoogle-cloudai-securitydata-leakageai-governancecloud-ai-platformvulnerabilityenterprise-riskmulti-tenant-securityai-infrastructure
Vertex AI 'Double Agent' Vulnerability Exposes Customer Data and Google Internal Code — Intelligence — Agentic Developer Tools Radar · Signal