{"ok":true,"trend":{"id":1990686,"platform":"hn","region":"global","key":"i found a $90k remote code execution vulnerability in google","title":"I Found a $90k Remote Code Execution Vulnerability in Google","url":"https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce","first_seen":"2026-10-12T14:13:24.671235Z","last_seen":"2026-10-14T11:23:35.865827Z","last_rank":2,"peak_rank":1,"last_volume":235,"peak_volume":235,"seen_count":93,"score":106.98,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Security researcher Simon Koeck has published a write-up detailing a remote code execution vulnerability he found in Google's developer site, which reportedly earned him a $90,000 reward through Google's bug bounty program. According to the write-up, the flaw involved Flask session pickle deserialization. The disclosure is drawing attention as an example of how lucrative responsible vulnerability disclosure can be.","why":"Bug bounty write-ups with large payouts attract strong interest from the security and developer community.","tone":"neutral","entities":["Google","Simon Koeck","Google Bug Bounty"],"summarized_at":"2026-10-14T08:29:24.240202Z","meta":{"via":"scan","lang":"en","link":"https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce","term":"vulnerability","hn_id":"50052638","comments":116},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Security researcher reports $90k remote code execution bug in Google","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-12T14:13:24.671235Z","rank":5,"volume":8},{"captured_at":"2026-10-12T15:20:39.870275Z","rank":28,"volume":20},{"captured_at":"2026-10-12T15:35:24.873032Z","rank":2,"volume":26},{"captured_at":"2026-10-12T15:35:39.874804Z","rank":27,"volume":26},{"captured_at":"2026-10-12T15:50:39.872721Z","rank":27,"volume":32},{"captured_at":"2026-10-12T16:05:39.791458Z","rank":23,"volume":39},{"captured_at":"2026-10-12T16:20:39.787483Z","rank":23,"volume":46},{"captured_at":"2026-10-12T16:29:24.422181Z","rank":10,"volume":53},{"captured_at":"2026-10-12T16:35:39.833510Z","rank":19,"volume":56},{"captured_at":"2026-10-12T16:50:40.008954Z","rank":20,"volume":59},{"captured_at":"2026-10-12T16:57:24.940379Z","rank":2,"volume":62},{"captured_at":"2026-10-12T17:05:39.791645Z","rank":20,"volume":65},{"captured_at":"2026-10-12T17:20:39.769562Z","rank":16,"volume":73},{"captured_at":"2026-10-12T17:35:39.783235Z","rank":17,"volume":76},{"captured_at":"2026-10-12T17:50:39.765892Z","rank":15,"volume":90},{"captured_at":"2026-10-12T17:51:46.470736Z","rank":6,"volume":93},{"captured_at":"2026-10-12T18:05:40.053943Z","rank":16,"volume":95},{"captured_at":"2026-10-12T18:19:46.925150Z","rank":2,"volume":106},{"captured_at":"2026-10-12T18:20:39.863828Z","rank":16,"volume":103},{"captured_at":"2026-10-12T18:35:39.785512Z","rank":16,"volume":114},{"captured_at":"2026-10-12T18:50:39.851742Z","rank":15,"volume":119},{"captured_at":"2026-10-12T19:05:40.166479Z","rank":15,"volume":123},{"captured_at":"2026-10-12T19:14:08.864385Z","rank":5,"volume":129},{"captured_at":"2026-10-12T19:20:39.778868Z","rank":15,"volume":130},{"captured_at":"2026-10-12T19:35:39.787358Z","rank":17,"volume":133},{"captured_at":"2026-10-12T19:42:08.541080Z","rank":2,"volume":134},{"captured_at":"2026-10-12T19:50:39.859877Z","rank":18,"volume":135},{"captured_at":"2026-10-12T20:05:39.805505Z","rank":17,"volume":139},{"captured_at":"2026-10-12T20:20:39.858328Z","rank":17,"volume":141},{"captured_at":"2026-10-12T20:35:39.878028Z","rank":17,"volume":144},{"captured_at":"2026-10-12T20:36:08.624514Z","rank":5,"volume":148},{"captured_at":"2026-10-12T20:50:39.849848Z","rank":17,"volume":150},{"captured_at":"2026-10-12T21:04:09.254417Z","rank":2,"volume":153},{"captured_at":"2026-10-12T21:05:39.803983Z","rank":17,"volume":153},{"captured_at":"2026-10-12T21:20:39.789629Z","rank":18,"volume":156},{"captured_at":"2026-10-12T21:35:39.777656Z","rank":17,"volume":159},{"captured_at":"2026-10-12T21:50:39.844724Z","rank":17,"volume":162},{"captured_at":"2026-10-12T21:58:09.621422Z","rank":5,"volume":165},{"captured_at":"2026-10-12T22:05:39.805911Z","rank":17,"volume":167},{"captured_at":"2026-10-12T22:20:39.811867Z","rank":15,"volume":172},{"captured_at":"2026-10-12T22:26:08.632455Z","rank":2,"volume":173},{"captured_at":"2026-10-12T22:35:39.853710Z","rank":15,"volume":174},{"captured_at":"2026-10-12T23:20:08.653159Z","rank":4,"volume":178},{"captured_at":"2026-10-12T23:48:09.081821Z","rank":2,"volume":179},{"captured_at":"2026-10-13T00:42:08.658997Z","rank":4,"volume":182},{"captured_at":"2026-10-13T01:10:08.843225Z","rank":2,"volume":183},{"captured_at":"2026-10-13T02:04:08.418112Z","rank":4,"volume":185},{"captured_at":"2026-10-13T02:32:08.655415Z","rank":2,"volume":185},{"captured_at":"2026-10-13T03:26:08.680241Z","rank":4,"volume":188},{"captured_at":"2026-10-13T03:54:08.594857Z","rank":2,"volume":189},{"captured_at":"2026-10-13T04:48:08.653437Z","rank":4,"volume":190},{"captured_at":"2026-10-13T05:16:08.745898Z","rank":2,"volume":191},{"captured_at":"2026-10-13T06:10:08.629800Z","rank":4,"volume":193},{"captured_at":"2026-10-13T06:38:08.593479Z","rank":2,"volume":195},{"captured_at":"2026-10-13T07:32:08.399820Z","rank":3,"volume":197},{"captured_at":"2026-10-13T08:00:25.678846Z","rank":2,"volume":198},{"captured_at":"2026-10-13T08:35:39.935895Z","rank":12,"volume":200},{"captured_at":"2026-10-13T08:50:39.887098Z","rank":12,"volume":202},{"captured_at":"2026-10-13T08:54:08.399667Z","rank":3,"volume":204},{"captured_at":"2026-10-13T09:05:39.807778Z","rank":11,"volume":205},{"captured_at":"2026-10-13T09:20:39.774864Z","rank":11,"volume":206},{"captured_at":"2026-10-13T09:22:35.508677Z","rank":2,"volume":209},{"captured_at":"2026-10-13T10:16:35.239341Z","rank":3,"volume":212},{"captured_at":"2026-10-13T10:44:56.628165Z","rank":2,"volume":212},{"captured_at":"2026-10-13T11:38:55.798879Z","rank":3,"volume":213},{"captured_at":"2026-10-13T12:06:55.935253Z","rank":2,"volume":213},{"captured_at":"2026-10-13T13:00:58.351535Z","rank":3,"volume":215},{"captured_at":"2026-10-13T13:28:56.221849Z","rank":2,"volume":219},{"captured_at":"2026-10-13T14:22:55.926905Z","rank":3,"volume":220},{"captured_at":"2026-10-13T14:50:56.114686Z","rank":2,"volume":221},{"captured_at":"2026-10-13T15:45:38.233407Z","rank":3,"volume":226},{"captured_at":"2026-10-13T16:13:56.848973Z","rank":2,"volume":227},{"captured_at":"2026-10-13T17:07:56.751963Z","rank":2,"volume":227},{"captured_at":"2026-10-13T17:35:56.996298Z","rank":2,"volume":229},{"captured_at":"2026-10-13T18:29:56.579923Z","rank":2,"volume":229},{"captured_at":"2026-10-13T18:57:57.102530Z","rank":2,"volume":229},{"captured_at":"2026-10-13T19:51:56.737589Z","rank":2,"volume":229},{"captured_at":"2026-10-13T20:19:57.218905Z","rank":2,"volume":229},{"captured_at":"2026-10-13T21:14:17.050814Z","rank":2,"volume":230},{"captured_at":"2026-10-13T21:42:16.587184Z","rank":2,"volume":230},{"captured_at":"2026-10-13T22:36:20.881202Z","rank":2,"volume":230},{"captured_at":"2026-10-13T23:04:16.976425Z","rank":2,"volume":230},{"captured_at":"2026-10-13T23:58:16.270610Z","rank":1,"volume":231},{"captured_at":"2026-10-14T00:26:16.585320Z","rank":2,"volume":231},{"captured_at":"2026-10-14T01:20:16.935635Z","rank":1,"volume":231},{"captured_at":"2026-10-14T01:48:17.071644Z","rank":2,"volume":232},{"captured_at":"2026-10-14T02:42:36.681857Z","rank":1,"volume":232},{"captured_at":"2026-10-14T03:10:36.890684Z","rank":2,"volume":232},{"captured_at":"2026-10-14T04:04:36.724065Z","rank":1,"volume":232},{"captured_at":"2026-10-14T04:32:56.739105Z","rank":2,"volume":232},{"captured_at":"2026-10-14T05:27:16.515498Z","rank":1,"volume":232},{"captured_at":"2026-10-14T05:55:17.181246Z","rank":2,"volume":232},{"captured_at":"2026-10-14T06:49:16.858525Z","rank":1,"volume":233},{"captured_at":"2026-10-14T07:17:36.208842Z","rank":2,"volume":234},{"captured_at":"2026-10-14T08:11:35.641128Z","rank":1,"volume":234},{"captured_at":"2026-10-14T08:39:35.522268Z","rank":2,"volume":234},{"captured_at":"2026-10-14T09:33:35.313032Z","rank":1,"volume":234},{"captured_at":"2026-10-14T10:01:37.120815Z","rank":2,"volume":234},{"captured_at":"2026-10-14T10:55:35.705541Z","rank":1,"volume":234},{"captured_at":"2026-10-14T11:23:35.865827Z","rank":2,"volume":235}],"posts":[{"platform":"hn","url":"https://news.ycombinator.com/item?id=50052638","author":"soeckly","title":"I Found a $90k Remote Code Execution Vulnerability in Google","snippet":null,"posted_at":"2026-10-12T07:28:53Z","likes":235}],"elsewhere":[],"window":"7d"}}