Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30

Export CSV
CVE-2026-85299

Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration

A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-project disk data. This vulnerability was patched on 31 August 2026, and no customer action is needed.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Compute Engine
CVE-2026-85297

Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Cloud Run Mcp
CVE-2026-85268

Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Identity Platform And Firebase Authentication
CVE-2026-85267

Cross-Site WebSocket Hijacking in Google Cloud Shell

A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was patched on 22 July 2026, and no customer action is needed.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Cloud Shell
CVE-2026-13745

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Gemini Cli Run-gemini-cli Github Action
CVE-2026-19486

SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Gemini Enterprise Agent Platform App Builder
CVE-2026-79696

Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session replay.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Agent Development Kit (adk)
CVE-2026-79707

Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Agent Development Kit (adk)
CVE-2026-4644

Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover

A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment. This vulnerability was patched on 11 December 2025, and no customer action is needed.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Integration Connectors
CVE-2026-19410

Google Cloud Build Comment Control Bypass via Webhook Suppression

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression. This vulnerability was patched on 24 June 2026, and no customer action is needed.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Cloud Build
CVE-2026-12717

Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in the tenant project using crafted JDBC connection string parameters. This vulnerability was patched on 1 May 2026, and no customer action is needed.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Bigquery Data Transfer Service
CVE-2026-19485

Bucket Squatting in Vertex AI Search for Commerce

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictable bucket names. This vulnerability was patched and no customer action is needed.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Vertex Ai Search For Commerce
CVE-2026-15623

Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version 6.3.85, and no customer action is needed.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Google Secops (chronicle Soar)
CVE-2026-15587

Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header

Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version 6.3.85, and no customer action is needed.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Google Secops (chronicle Soar)
CVE-2026-12715

Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no customer action is needed.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Firebase Studio
CVE-2026-18236

Google-ADK Continuation Forgery

A vulnerability in the Agent Development Kit (ADK) allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework did not verify if the target tool was registered to the executing agent, did not validate if the tool actually required confirmation, and did not match the confirmation arguments against the original tool call event in the history.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Agent Development Kit (adk)
CVE-2026-14934

Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise

A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tenant repository takeover. This vulnerability was patched on 10 May 2026, and no customer action is needed.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Google Google Cloud
Products
Cloud Platform Bigquery Colab Enterprise
CVE-2026-12537

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Google Google Cloud
Products
Gemini-cli Run-gemini-cli Gemini Cli and 1 more
CVE-2026-8934

Cross-Project Information Leakage in Google App Engine UI

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Cloud Console Uis
CVE-2026-2244

Sensitive Data Exposure in Google Cloud Vertex AI Workbench

A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a built-in startup script. All instances after January 30th, 2026 have been patched to protect from this vulnerability. No user action is required for this.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Vertex Ai