---
id: 1188
title: "[CVE-2026-2031] StubZero: $148,337 RCE in Google Cloud Production"
cve: CVE-2026-2031
source_domain: brutecat.com
source_url: "https://brutecat.com/articles/google-cloud-rce/"
published_at: "2026-05-22 00:00"
tags: ["bug-bounty", "cloud", "rce", "information-disclosure", "cve", "google-cloud", "protobuf"]
phying_url: "https://phying.com/item/1188"
lang: en
---

# [CVE-2026-2031] StubZero: $148,337 RCE in Google Cloud Production

## Summary

A chance Discord message, two missing pieces, and one hour before the window closed: From info leak to RCE on Google Cloud. Three months later, it happened again.

## Intelligence Metadata

- **Sources:** brutecat.com
- **CVE:** CVE-2026-2031
- **Published:** 2026-05-22 00:00
- **Original:** https://brutecat.com/articles/google-cloud-rce/
- **Phying News:** https://phying.com/item/1188