Sensitive Data Exposure Vulnerability in Google BigQuery by Google

CVE-2026-3259

What is CVE-2026-3259?

A vulnerability exists in the Materialized View Refresh mechanism of Google BigQuery on Google Cloud Platform, which allows an authenticated user to potentially expose sensitive information. This occurs when a specially crafted materialized view triggers a runtime error during the refresh process, leading to the potential disclosure of confidential data. Google addressed this issue with a patch released on January 29, 2026, and no customer action is required to mitigate the risk.

References