---
id: 7804
title: "Escalating Privileges in Google Cloud via Open Groups"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/escalating-privileges-in-google-cloud-via-open-groups/"
published_at: "2024-07-31T00:00:00Z"
tags: ["bug-bounty", "cloud", "cloud-security", "privilege-escalation", "iam", "gcp", "google-groups"]
phying_url: "https://phying.com/item/7804"
lang: en
---

# Escalating Privileges in Google Cloud via Open Groups

## Summary

Google Groups with open join settings that hold IAM roles in GCP let any organization member self-join and inherit those permissions. Google classified the issue as Won't Fix, intended behavior.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-07-31T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/escalating-privileges-in-google-cloud-via-open-groups/
- **Phying News:** https://phying.com/item/7804