[Updated] GCP-2026-059

Detected Sep 25, 2026, 10:00 AM

View Page

Significance

High

Change Type

Security Update

AI Confidence

100%

AI Summary

Google Cloud published security advisory GCP-2026-059 regarding CVE-2026-4644. A high-severity missing authorization vulnerability in Integration Connectors allowed attackers to escalate privileges and take over projects; the issue was patched on December 11, 2025.

Update Details

Published: 2026-09-04 Description Description Severity Notes A Missing Authorization vulnerability was discovered in the HTTP Connector in Integration Connectors versions prior to December 11, 2025. What should I do? No customer action is required. This vulnerability was patched on December 11, 2025. What vulnerabilities are being addressed? An authenticated attacker could use an unauthorized service account attachment to escalate privileges and take over a Google Cloud project. High CVE-2026-4644 ]]>

Sep 16, 2026, 12:37 PMView original