Vulnerabilities Allowed Full Compromise of Google Looker Instances

Back Securityweek

Vulnerabilities Allowed Full Compromise of Google Looker Instances

Securityweek • February 4, 2026

Share: View original

Two vulnerabilities can be exploited to fully compromise instances of the Google Looker business intelligence platform.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Tenable Discovers Looker Flaws Allowing Remote Control and Data Extraction Tenable Research has identified two vulnerabilities in Google Looker that could enable attackers to remotely control Looker servers and access sensitive internal data. These flaws, known as 'LookOut', affect both cloud and on-premises deployments of Looker, which is utilized by over 60,000 organizations globally. Google has acted quickly to patch these vulnerabilities, and organizations are advised to ensure they have updated their systems. 17 sources 25

Extracted Entities

Attack Types (1)

Platforms (1)