10.0
Critical
CVE-2026-2031 An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration…
Description
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Internal Integration Platform APIs 2026 | earliest → < 2026-01-23 | 2026-01-23 |
References
- docs.cloud.google.com docs.cloud.google.com
Timeline
- Published
- Last modified