Preliminary research
GCP Apigee Space and Environment Isolation Bypass Using Internal Services
AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Apigee proxy-deployment access in one environment reaches unauthenticated internal services despite management API restrictions. Prometheus metrics reveal synchronizer pod addresses, and their runtime-contract endpoint exposes proxy source, policies and configuration from other environments and Spaces on the same instance.
Record
- Researcher
- Moshe Bernstein
- Published by
- Tenable Research
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Moshe Bernstein, first published at the original source. Preserved copies are kept so the citation survives its host.