Deserialization Vulnerability in Google Cloud Application Integration
CVE-2026-93327

9.4CRITICAL

Key Information:

Vendor: Google Cloud
Status: Application Integration
Vendor: CVE Published:; 30 October 2026

🔔 Create Google Cloud Vulnerability Alert

What is CVE-2026-93327?

A vulnerability in the SubWorkflow task of Google Cloud Application Integration allows authenticated attackers to execute arbitrary code through maliciously crafted serialized objects. This issue affects versions prior to September 11, 2026, on the Google Cloud Platform. The vulnerability has been addressed with a security patch, ensuring that customer action is not required.

Affected Version(s)

Application Integration 0 < 2026-09-11

References

https://docs.cloud.google.com/support/bulletins

CVSS V4

Score:

9.4

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 30, 2026
Vulnerability Reserved
Sep 17, 2026

Credit

Saurav Bhattarai

CVE-2026-93327 Data

JSON