GCP-2026-065

Detected Sep 28, 2026, 11:30 AM

View Page

Significance

High

Change Type

Security Update

AI Confidence

100%

AI Summary

Google Cloud published security advisory GCP-2026-065 regarding a critical deserialization vulnerability (CVE-2026-81867) in Application Integration. The issue allowed arbitrary code execution and was patched on June 28, 2026; no customer action is required.

Update Details

Published: 2026-09-28 Description Description Severity Notes A Deserialization of Untrusted Data vulnerability was discovered in the JavaScript Task in Application Integration versions prior to June 28, 2026. What should I do? No customer action is required. This vulnerability was patched on June 28, 2026. What vulnerabilities are being addressed? An authenticated user with standard permissions could use a specially crafted script to run arbitrary code on the shared production servers. Critical CVE-2026-81867 ]]>

Sep 28, 2026, 9:57 AMView original