9.4 Critical

CVE-2026-19410 An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24…

Description

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression. This vulnerability was patched on 24 June 2026, and no customer action is needed.

Affected products and versions

Product	Affected versions	Fixed in
Google Cloud Build 2026	earliest → < 2026-06-24	2026-06-24

Do you use Google Cloud Build?

Track this CVE Watch Google Cloud Build Check my SBOMs

www.cveye.io/en/cve/CVE-2026-19410

Timeline

Published August 31, 2026
Last modified August 31, 2026

References

docs.cloud.google.com docs.cloud.google.com

Track this CVE