Missing Authorization Vulnerability in Google Cloud Integration Connectors by Google
CVE-2026-4644

8.5HIGH

Key Information:

Vendor: Google Cloud
Status: Integration Connectors
Vendor: CVE Published:; 4 September 2026

🔔 Create Google Cloud Vulnerability Alert

What is CVE-2026-4644?

An authenticated user can exploit a missing authorization vulnerability in the HTTP Connector of Google Cloud Integration Connectors to escalate privileges. This flaw permits the unauthorized attachment of service accounts, potentially enabling the user to take control of a Google Cloud Project. The issue affects versions released before December 11, 2025, but has since been addressed. No further action is required from users.

Affected Version(s)

Integration Connectors 0 < 2025-12-11

References

https://docs.cloud.google.com/support/bulletins#gcp-2026-059

CVSS V4

Score:

8.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 4, 2026
Vulnerability Reserved
Mar 23, 2026

Credit

asterfiester

CVE-2026-4644 Data

JSON