8.3
High
CVE-2026-81375 A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to…
Description
A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Application Integration 2026 | earliest → < 2026-06-30 | 2026-06-30 |
Other CVEs of Application Integration
The 7 CVEs of Application Integration →
CVE-2026-93327
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…
9.4
Critical
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google…
7.3
High
CVE-2026-81867
A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration…
9.4
Critical
CVE-2026-19759
An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions…
9.4
Critical