Findings

CVE-2026-81375

Published: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration vers…

Published Oct 14, 2026 · Google Google Cloud

Published: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration versions prior to June 30, 2026. What should I do? No customer action is required. This vulnerability was patched on June 30, 2026. What vulnerabilities are being addressed? An authenticated attacker could read and exfiltrate arbitrary Google-internal files using a crafted attachment path. High CVE-2026-81375 ]]>

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · Google Cloud Security Bulletins

    Detected

    Published: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration versions prior to June 30, 2026. What should I do? No customer action is required. This vulnerability was patched on June 30, 2026. What vulnerabilities are being addressed? An authenticated attacker could read and exfiltrate arbitrary G

Sources

  • CVE.orgVulnerability recordCVE-2026-81375

    Official CVE identifier

    cve.org
  • Google Cloud Security BulletinsVendor advisoryCVE-2026-81375

    Published: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration versions prior to June 30, 2026. What should I do? No customer action is required. This vulnerability was patched on

    docs.cloud.google.com