CVE-2026-81867

Name of the Vulnerable Software and Affected Versions Google Cloud Application Integration versions prior to 2026-06-28

Description A Deserialization of Untrusted Data issue in the JavaScript Task on Google Cloud Platform allows an authenticated user with standard permissions to execute arbitrary code on shared production servers. This is achieved by using a specially crafted script to bypass parameter guards. Deserialization is the process of converting a data format back into an object, which can be exploited if the input is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.