“ConfusedComposer”: GCP Composer Vulnerability Allows Privilege Escalation

A critical privilege escalation vulnerability, dubbed ConfusedComposer, was discovered in Google Cloud Platform’s (GCP) Cloud Composer service. The vulnerability has been patched by Google, with updates rolled out to new Composer instances.