Skip to content
OpenAdvisories
High · 7.6 CVE-2025-13292 EUVD-2025-201511GHSA-rwr4-4f3w-p582

Improper access control in Google Cloud Apigee-X allows cross-tenant Analytics modification and log data access.

Published Dec 6, 2025 · Updated Jan 30, 2026 · Assigned by GoogleCloud

Description

A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizations.

Apigee-X was found to be vulnerable.

This vulnerability was patched in version 1-16-0-apigee-3. No user action is required for this.

Affected products

VendorProductAffectedFixed
Google Cloud Apigee-X < 1-16-0-apigee-3 1-16-0-apigee-3

Advisories 1

References