Threat database

A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was patched on 22 July 2026, and no customer action is needed.

CVE-2026-85298 is an Incorrect Authorization vulnerability in Google Cloud Application Integration's AuthConfig validation and integration execution runtime. It affects versions prior to 2026-08-27 and allows an authenticated user to escalate privileges and impersonate a service account within the project. The vulnerability was patched on August 27, 2026, and no customer action is required.

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

CVE-2026-81867 is a critical deserialization of untrusted data vulnerability in the JavaScript Task component of Google Cloud Application Integration. It affects versions prior to 2026-06-28 and allows an authenticated user with standard permissions to execute arbitrary code on shared production servers by using a specially crafted script. The vulnerability was patched on June 28, 2026, and no customer action is required.

CVE-2026-19759 is an Incorrect Authorization vulnerability in Google Cloud Application Integration versions prior to 2026-06-17. It allows an authenticated Google Cloud user to execute arbitrary internal RPCs within Google's production network under a privileged identity by exploiting an internal-only task type. This vulnerability was patched on June 17, 2026, and no customer action is required.

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.

A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.

CVE-2026-13745 is a critical vulnerability in Google Cloud Gemini CLI versions prior to 0.39.1. It allows attackers to achieve arbitrary code execution by tricking users into running the CLI in an untrusted directory. The attack exploits improper input validation where untrusted .env files can override the GEMINI_CLI_HOME environment variable, causing malicious configuration files to be loaded and bypassing folder trust prompts.

A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment. This vulnerability was patched on 11 December 2025, and no customer action is needed.

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.

CVE-2026-19410 is a critical time-of-check time-of-use (TOCTOU) race condition vulnerability in Google Cloud Build's GitHub Trigger Comment Control. It allows a remote attacker to execute unreviewed code in the build environment by exploiting webhook suppression. This vulnerability was patched by Google on June 24, 2026, and no customer action is required.

CVE-2026-19485 is a critical vulnerability in Google Cloud Vertex AI Search for Commerce prior to 2026-04-27. It involves predictable resource names in the BigQuery Import Staging component, allowing an attacker who knows a victim's project number to gain read/write access to staged data and error logs. This vulnerability has been patched by Google, and no customer action is required. The vulnerability has a CVSS 4.0 score of 9.3, indicating high severity. It affects the cloud service hosted by Google Cloud Platform.

An Improper Input Validation vulnerability (CWE-74) exists in the CData JDBC driver integration within Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01. This flaw allows an authenticated attacker to execute remote code in the connector container and escalate privileges within the tenant project by using crafted JDBC connection string parameters. The vulnerability was patched on May 1, 2026, and no customer action is required.

CVE-2026-12710 is a critical missing authorization vulnerability in the QueryEngineTask component of Google Cloud Application Integration affecting versions from 2025-04-28 to 2026-04-04. This flaw allows an external attacker to access sensitive internal data without proper authorization. The vulnerability was patched on April 4, 2026, and no customer action is required as Google manages remediation for this cloud service.

Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version 6.3.85, and no customer action is needed.

A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7 on Looker-hosted and Self-hosted allows an attacker to execute arbitrary JavaScript leading to administrative account takeover using a maliciously crafted URL. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required for these. Self-hosted instances must be upgraded to the patched versions: 25.6.103+, 25.12.65+, 25.18.68+, 26.0.66+, 26.2.47+, 26.4.36+, 26.6.28+, or 26.8.7+.

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no customer action is needed.

A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tenant repository takeover. This vulnerability was patched on 10 May 2026, and no customer action is needed.

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.