CVE-2026-12710: CWE-862 Missing Authorization in Google Cloud Application Integration
Description
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.
CVSS v4.0
Score 9.3critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-12710) involves a missing authorization check in the QueryEngineTask of Google Cloud Application Integration. It affects versions released between 2025-04-28 and 2026-04-04, enabling unauthorized external access to sensitive internal data. The issue was officially patched on April 4, 2026. The CVSS 4.0 vector indicates a critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality and integrity.
Potential Impact
An external attacker can access sensitive internal data due to the missing authorization control. This can lead to data exposure and compromise of confidentiality and integrity within the affected component. However, no known exploits in the wild have been reported.
Mitigation Recommendations
The vulnerability was patched on April 4, 2026. No customer action is required as the fix has been applied. Users should ensure they are running versions released after the patch date to be protected.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m95m-h7f9-f822
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-12710"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 4.0
- Is Cloud Service
- true
- State
- PUBLISHED
Threat ID: 6a89a6c8acd9273b49150b0a
Added to database: 08/22/2026, 13:40:24 UTC
Last enriched: 08/22/2026, 13:41:41 UTC
Last updated: 10/05/2026, 18:48:16 UTC
Views: 73
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.