PT-2026-114297 · Google · Cloud Application Integration

·

CVE-2026-85298

·

Published

2026-10-14

·

Updated

2026-10-14

CVSS v4.0

7.3

High

VectorAV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/U:Clear
Name of the Vulnerable Software and Affected Versions Google Cloud Application Integration versions prior to 2026-08-27
Description An incorrect authorization issue exists in the AuthConfig validation and integration execution runtime. This flaw allows an authenticated user to escalate privileges and impersonate a service account within the project.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-85298

Affected Products

Cloud Application Integration