CVE-2025-2903

Summary

CVE-2025-2903 is a vulnerability in Google Cloud Platform (GCP) that allows an attacker to create user accounts during VM deployment using the OS Login feature. This grants unauthorized access through SSH, providing the attacker with command-line control of the operating system. The consequences of this vulnerability include the potential theft of sensitive data, installation of malware, and disruption or disablement of VM functionality. This issue poses a significant risk to organizations utilizing GCP and should be addressed promptly by implementing proper access control measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.