GCP-2026-066

Detected Sep 28, 2026, 11:30 AM

View Page

Significance

High

Change Type

Security Update

AI Confidence

100%

AI Summary

Google Cloud published security advisory GCP-2026-066 regarding a 'Confused Deputy' vulnerability (CVE-2026-81375) in Application Integration. The flaw allowed authenticated attackers to access internal files, but was patched on June 30, 2026; no customer action is required.

Update Details

Published: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration versions prior to June 30, 2026. What should I do? No customer action is required. This vulnerability was patched on June 30, 2026. What vulnerabilities are being addressed? An authenticated attacker could read and exfiltrate arbitrary Google-internal files using a crafted attachment path. High CVE-2026-81375 ]]>

Sep 28, 2026, 9:57 AMView original