Skip to content
fr Sign in
9.4 Critical

CVE-2026-93327 A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…

Description

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.

Affected products and versions

Product Affected versions Fixed in
Application Integration 2026 earliest → < 2026-09-11 2026-09-11

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Application Integration

The 7 CVEs of Application Integration →
CVE-2026-85298 An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google… 7.3 High CVE-2026-81375 A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to… 8.3 High CVE-2026-81867 A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration… 9.4 Critical CVE-2026-19759 An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions… 9.4 Critical
Track this CVE