VULNERABILITIES ALLOWED FULL COMPROMISE OF GOOGLE LOOKER INSTANCES

Summary from the TLDR InfoSec newsletter

Tenable researchers uncovered LookOut, two flaws in Google Looker that allow attackers with developer rights to run remote code, steal secrets, and exfiltrate the internal MySQL database via an auth bypass and error-based SQL injection. Google patched cloud-hosted instances in September 2025, but self-hosted deployments must update, though no active exploitation has been detected.