Skip to content
OpenAdvisories

Product · Google Cloud

Dataform

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-14934

    Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise

    A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to esca…

    Google Cloud Dataform BigQuery Colab Enterprise
  • Critical 10.0
    CVE-2025-9118

    Dataform Path Traversal

    A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file.

    Google Cloud Dataform