9.4
Critique
CVE-2026-4764 A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform…
Description
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was patched on 15 March 2026, and no customer action is needed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dialogflow CX 2026 | premières → < 2026-03-15 | 2026-03-15 |
Références
- docs.cloud.google.com docs.cloud.google.com
Chronologie
- Publiée
- Dernière modification