9.3
Critical
CVE-2026-12710 A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from…
Description
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Application Integration 2025 | 2025-04-28 → < 2026-04-04 | 2026-04-04 |
References
- cloud.google.com cloud.google.com
Timeline
- Published
- Last modified
Other CVEs of Application Integration
The 7 CVEs of Application Integration →
CVE-2026-93327
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…
9.4
Critical
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google…
7.3
High
CVE-2026-81375
A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to…
8.3
High
CVE-2026-81867
A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration…
9.4
Critical