Privilege Escalation in Vertex AI Enabled LLM Model Exfiltration

Palo Alto Networks Unit 42 disclosed ModeLeak, a security issue in Google Cloud Vertex AI that allowed an attacker to escalate privileges and exfiltrate hosted large language models. The report indicates the flaw affected the trust boundaries around managed AI services, creating a path from lower-privileged access to unauthorized retrieval of proprietary model assets stored or served through Vertex AI.

The finding highlights a high-impact cloud AI risk: organizations using managed model platforms could face theft of valuable intellectual property if identity, access controls, and service permissions are misconfigured or insufficiently isolated. The disclosure underscores the need for defenders to review IAM roles, service account permissions, and model access paths in Vertex AI environments to prevent unauthorized access to hosted models and related AI resources.