Back to Feed
VulnerabilitiesMar 10, 2026

New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries

Researchers disclosed nine cross-tenant vulnerabilities in Google Looker Studio, collectively named "LeakyLooker," that could allow attackers to execute arbitrary SQL queries and exfiltrate sensitive data from Google Cloud environments. The flaws enable potential unauthorized access across multiple tenant instances within the cloud infrastructure.

Summary

Researchers disclosed nine cross-tenant vulnerabilities in Google Looker Studio, collectively named "LeakyLooker," that could allow attackers to execute arbitrary SQL queries and exfiltrate sensitive data from Google Cloud environments. The flaws enable potential unauthorized access across multiple tenant instances within the cloud infrastructure.

Indicators of Compromise

  • malware — LeakyLooker