Skip to content
OpenAdvisories
High · 7.1 CVE-2026-3259 EUVD-2026-25203GHSA-g3wg-j2ff-prcp

Sensitive Data Disclosure in BigQuery via Materialized View Error Messages

Published Apr 23, 2026 · Updated Apr 30, 2026 · Assigned by GoogleCloud

Description

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error during the refresh process.

This vulnerability was patched on 29 January 2026, and no customer action is needed.

Affected products

VendorProductAffectedFixed
Google Cloud BigQuery < 01/29/2026 01/29/2026

References