CVE-2026-12710
CriticalCVSS 9.3Summary
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.
Risk Assessment
The vulnerability may allow an external attacker to access sensitive internal data, potentially leading to a breach of confidentiality.
Recommendation
No customer action is required as the patch has already been deployed by the provider. However, it is recommended to monitor security advisories.
Original NVD description (English source)
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.