Home Google CVE-2024-9858
Back to Google

CVE-2024-9858

Google Cloud Migrate to containers

Google CVSS 7.8 Updated March 15, 2026

Executive Risk Summary

"A local user 'm2cuser' with administrator privileges is created by default in Google Cloud Migrate to containers versions 1.1.0 to 1.2.2, posing a security risk if the 'analyze' or 'generate' commands are interrupted or skipped. Upgrading to version 1.2.3 or beyond is recommended to mitigate this risk."

Operational Audit Arsenal

Target Type User Account
Target Asset m2cuser
Standard Path %windir%\System32\config\users
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: m2cuser (User Account)
$Targets = 'm2cuser'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Google Cloud Migrate to containers service

Internal Work Notes

Security vulnerability in Google Cloud Migrate to containers due to default admin user creation, requiring upgrade to version 1.2.3 or later.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.