Vulnerabilities Allowed Full Compromise of Google Looker Instances

Back Feeds.Feedburner

Vulnerabilities Allowed Full Compromise of Google Looker Instances

Feeds.Feedburner •Eduard Kovacs • February 4, 2026

Share: View original

The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Tenable Discovers Looker Flaws Allowing Remote Control and Data Extraction Tenable Research has identified two vulnerabilities in Google Looker that could enable attackers to remotely control Looker servers and access sensitive internal data. These flaws, known as 'LookOut', affect both cloud and on-premises deployments of Looker, which is utilized by over 60,000 organizations globally. Google has acted quickly to patch these vulnerabilities, and organizations are advised to ensure they have updated their systems. 17 sources 25

Extracted Entities

Attack Types (1)

MITRE ATT&CK (3)

T1041 - Exfiltration Over C2 Channel T1203 - Exploitation for Client Execution T1567 - Exfiltration Over Web Service

Platforms (1)

Vulnerabilities (1)