Google Cloud
Vulnerability activity for Google Cloud: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 7
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 16
- Critical (CVSS 9+)
- 5
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 16
- Critical (CVSS 9+)
- 5
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.4CriticalOct 30, 2026Google Cloud Application Integration DeserializationCVE-2026-93327A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.
- 8.7HighOct 30, 2026Google Cloud Identity Platform and Firebase Authentication XSSCVE-2026-85268A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.
- 8.3HighOct 27, 2026Google Cloud Compute Engine Auth bypass / access controlCVE-2026-85299A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-project disk data. This vulnerability was patched on 31 August 2026, and no customer action is needed.
- 7.7HighOct 26, 2026Google Cloud Cloud Run MCPCVE-2026-85297Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later.
- 9.3CriticalOct 26, 2026Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) Path traversal / file handlingCVE-2026-93328Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.
- 8.7HighOct 20, 2026Google Cloud Cloud ShellCVE-2026-85267A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request. This vulnerability was patched on 22 July 2026, and no customer action is needed.
- 7.3HighOct 14, 2026Google Cloud Application Integration Auth bypass / access controlCVE-2026-85298An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was patched on 27 August 2026, and no customer action is needed.
- 9.4CriticalSep 28, 2026Google Cloud Application Integration DeserializationCVE-2026-81867A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially crafted script bypassing param guards. This vulnerability was patched on 28 June 2026, and no customer action is needed.
- 8.3HighSep 28, 2026Google Cloud Application IntegrationCVE-2026-81375A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.
- 9.4CriticalSep 28, 2026Google Cloud Application Integration Auth bypass / access controlCVE-2026-19759An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged identity using an internal-only task type. This vulnerability was patched on 17 June 2026, and no customer action is needed.
- 7.7HighSep 15, 2026Google Cloud Gemini Enterprise Agent Platform SDK for Python Crypto / certificateCVE-2026-19407Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-project token theft.
- 8.7HighSep 11, 2026Google Cloud Gemini Enterprise Agent Platform App Builder SSRFCVE-2026-19486A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.
- 7.7HighSep 10, 2026Google Cloud Gemini CLI Code / command injectionCVE-2026-13745A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.
- 10.0CriticalSep 9, 2026Google Cloud Agent Development Kit (ADK) for Python Code / command injectionCVE-2026-79696A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session replay.
- 8.7HighSep 4, 2026Google Cloud Agent Development Kit (ADK) Path traversal / file handlingCVE-2026-79707A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted file_path query parameter.
- 8.5HighSep 4, 2026Google Cloud Integration Connectors Auth bypass / access controlCVE-2026-4644A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment. This vulnerability was patched on 11 December 2025, and no customer action is needed.
Top products
- Application Integration5 CVEs in the last year, 3 critical
- MCP Toolbox for Databases (googleapis/mcp-toolbox)1 CVE in the last year, 1 critical
- Integration Connectors1 CVE in the last year
- Identity Platform and Firebase Authentication1 CVE in the last year
- Gemini Enterprise Agent Platform SDK for Python1 CVE in the last year
- Gemini Enterprise Agent Platform App Builder1 CVE in the last year
- Gemini CLI1 CVE in the last year
- Compute Engine1 CVE in the last year
- Cloud Shell1 CVE in the last year
- Cloud Run MCP1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.