VulnerabilitiesMar 10, 2026
New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
Researchers disclosed nine cross-tenant vulnerabilities in Google Looker Studio, collectively named "LeakyLooker," that could allow attackers to execute arbitrary SQL queries and exfiltrate sensitive data from Google Cloud environments. The flaws enable potential unauthorized access across multiple tenant instances within the cloud infrastructure.
Summary
Researchers disclosed nine cross-tenant vulnerabilities in Google Looker Studio, collectively named "LeakyLooker," that could allow attackers to execute arbitrary SQL queries and exfiltrate sensitive data from Google Cloud environments. The flaws enable potential unauthorized access across multiple tenant instances within the cloud infrastructure.
Indicators of Compromise
- malware — LeakyLooker