CVE-2026-85298

Status: Received

Description

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was patched on 27 August 2026, and no customer action is needed.

Published
October 14, 2026 12:17 PM
Last Modified
October 14, 2026 2:17 PM
Source
f45cbf4e-4146-4068-b7e1-655ffc2c548c

Weaknesses (CWE)

CWE-863

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry