Findings

CVE-2026-14934

Published: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Ente…

Published Oct 14, 2026 · Google Google Cloud

Published: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Enterprise. What should I do? No customer action is required. Google has already applied mitigations to all impacted products and services. What vulnerabilities are being addressed? During repository creation, an authenticated attacker could potentially escalate their permissions and perform cross-tenant repository takeover. Critical CVE-2026-14934 ]]>

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · Google Cloud Security Bulletins

    Detected

    Published: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Enterprise. What should I do? No customer action is required. Google has already applied mitigations to all impacted products and services. What vulnerabilities are being addressed? During repository creation, an authenticated attacker c

Sources

  • CVE.orgVulnerability recordCVE-2026-14934

    Official CVE identifier

    cve.org
  • Google Cloud Security BulletinsVendor advisoryCVE-2026-14934

    Published: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Enterprise. What should I do? No customer action is required. Google has already applied mitigations to all impacted

    docs.cloud.google.com