Incorrect Authorization Vulnerability in Google Cloud Application Integration
CVE-2026-85298

7.3HIGH

Key Information:

Vendor: Google Cloud
Status: Application Integration
Vendor: CVE Published:; 14 October 2026

🔔 Create Google Cloud Vulnerability Alert

What is CVE-2026-85298?

An incorrect authorization vulnerability exists in the AuthConfig validation and integration execution runtime of Google Cloud Application Integration. This flaw allows an authenticated user to escalate their privileges and impersonate a service account within the project. The issue was resolved in the release on August 27, 2026, requiring no action from customers regarding the fix.

Affected Version(s)

Application Integration 0 < 2026-08-27

References

https://docs.cloud.google.com/support/bulletins#gcp-2026-068

https://docs.cloud.google.com/application-integration/doc...

CVSS V4

Score:

7.3

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 14, 2026
Vulnerability Reserved
Sep 3, 2026

Credit

Mohammad Seet

CVE-2026-85298 Data

JSON