HIGH 7.3 NVD
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior t
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project.
This vulnerability was patched on 27 August 2026, and no customer action is needed.
References
- https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-068
- https://docs.cloud.google.com/support/bulletins#gcp-2026-068
This high severity vulnerability with a CVSS score of 7.3 was published on 2026-10-14 via NVD.
vulnfeed aggregates 14864 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.