Skip to content
OpenAdvisories
High · 7.3 CVE-2026-85298 EUVD-2026-101004GHSA-53cj-mr2j-j7q8

Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by GoogleCloud

Description

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project.

This vulnerability was patched on 27 August 2026, and no customer action is needed.

Affected products

VendorProductAffectedFixed
Google Cloud Application Integration < 2026-08-27 2026-08-27

References