CRITICAL 9.4 NVD

CVE-2026-93327

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud P

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.

References

https://docs.cloud.google.com/support/bulletins

Published: 2026-10-30 · Source: NVD · Feed updated: 2026-10-30

This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-10-30 via NVD.

Risk Timeline

CVE Disclosed2026-10-30 · -1 days ago

Remediation Resources

Official Advisory

docs.cloud.google.com/support/bulletins

vulnfeed aggregates 17712 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.