Preliminary research
Remote Command Execution in Google Cloud with Single Directory Deletion
AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
Looker's delete_dir rejects a path containing .git but not a bare /, so rm_rf is handed the whole checked-out repository. It deletes post-order in readdir order, predictable enough on ext4 that a sprayed directory puts .git first and leaves a long window. A concurrent git status then finds no .git, reads the worktree's own config and runs its core.fsmonitor value as a command; the pod's service account could also update secrets shared across instances.
Record
- Researcher
- RyotaK
- Published by
- GMO Flatt Security Research
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of RyotaK, first published at the original source. Preserved copies are kept so the citation survives its host.