I Found a $90k Remote Code Execution Vulnerability in Google

A vulnerability in Google's Devsite, a documentation platform for developers, has been discovered by a security researcher, Simon Koeck. The vulnerability allows for remote code execution and can be exploited for malicious purposes. The researcher found that the issue lies in the way Devsite handles Flask sessions, which are stored in pickle format. This allows an attacker to inject malicious code into the session, enabling remote code execution. The vulnerability is confirmed to exist in the current version of Devsite, and Google has been notified. The researcher has also provided a proof-of-concept exploit, which demonstrates the vulnerability. The severity of the issue is considered high, given that it allows for remote code execution, and Google is likely to take swift action to address the vulnerability.