---
id: 7783
title: "Filling up the DagBag: Privilege Escalation in Google Cloud Composer"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/privilege-escalation-google-cloud-composer/"
published_at: "2024-11-06T00:00:00Z"
tags: ["bug-bounty", "cloud", "cloud-security", "privilege-escalation", "gcp", "cloud-composer", "apache-airflow", "service-account"]
phying_url: "https://phying.com/item/7783"
lang: en
---

# Filling up the DagBag: Privilege Escalation in Google Cloud Composer

## Summary

Write access to a Cloud Composer storage bucket lets attackers upload a malicious DAG, gain command execution, and hijack its service account, which defaults to project Editor privileges.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-11-06T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/privilege-escalation-google-cloud-composer/
- **Phying News:** https://phying.com/item/7783