CVE-2026-85298
Published: 2026-10-14 Description Description Severity Notes An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in…
Published Oct 14, 2026 · Google Google Cloud
Published: 2026-10-14 Description Description Severity Notes An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27, 2026. What should I do? No customer action is required. This vulnerability was patched on August 27, 2026. What vulnerabilities are being addressed? An authenticated user could escalate privileges and impersonate a service account in the Google Cloud project. Critical CVE-2026-85298 ]]>
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · Google Cloud Security Bulletins
Detected
Published: 2026-10-14 Description Description Severity Notes An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27, 2026. What should I do? No customer action is required. This vulnerability was patched on August 27, 2026. What vulnerabilities are being addressed? An authenticated user could es
Sources
- CVE.orgVulnerability recordCVE-2026-85298
Official CVE identifier
cve.org - Google Cloud Security BulletinsVendor advisoryCVE-2026-85298
Published: 2026-10-14 Description Description Severity Notes An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27, 2026. What should I do? No customer action is required. Thi
docs.cloud.google.com