Skip to content
fr Sign in
9.4 Critical

CVE-2026-19759 An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions…

Description

An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platform allows an authenticated Google Cloud user to execute arbitrary internal RPCs from inside Google's production network under a privileged identity using an internal-only task type. This vulnerability was patched on 17 June 2026, and no customer action is needed.

Affected products and versions

Product Affected versions Fixed in
Application Integration 2026 earliest → < 2026-06-17 2026-06-17

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Application Integration

The 7 CVEs of Application Integration →
CVE-2026-93327 A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration… 9.4 Critical CVE-2026-85298 An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google… 7.3 High CVE-2026-81375 A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to… 8.3 High CVE-2026-81867 A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration… 9.4 Critical
Track this CVE