Skip to content
Sign in
9.3 Critical

CVE-2026-12710 A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from…

Description

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.

Affected products and versions

Product Affected versions Fixed in
Application Integration 2025 2025-04-28 → < 2026-04-04 2026-04-04

Other CVEs of Application Integration

The 7 CVEs of Application Integration →
CVE-2026-93327 A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration… 9.4 Critical CVE-2026-85298 An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google… 7.3 High CVE-2026-81375 A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to… 8.3 High CVE-2026-81867 A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration… 9.4 Critical
Track this CVE