🔴 Transitive Access Abuse - Data Exfiltration via Document AI

The Document AI service unintentionally allows users to read any Cloud Storage object in the same project and write to an attacker-controlled location.

https://www.vectra.ai/blog/transitive-access-abuse-data-exfiltration-via-document-ai

#gcp