We've published a new blog post by RyotaK @ryotkak ! He exploited a directory deletion race condition in Google Cloud's Looker, leading to full RCE and K8s privilege escalation. Read the technical details here: flatt.tech/research/posts/re…

Remote Command Execution in Google Cloud with Single Directory Deletion

Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at GMO Flatt Security Inc. A while ago, I participated in the Google Cloud VRP bugSWAT, a live hacking event organized by Google....

flatt.tech

Mar 23, 2026 · 2:29 PM UTC

1
29
114
46,414
Sort replies: Relevant Recent Liked
Replying to @flatt_sec_en @ryotkak
Nice finding, fyi there is a typo in your hamburger menu
1
4
861