Beveiligingsadvies

CVE-2026-3136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-03 16:22:54
Laatst bijgewerkt 2026-03-04 04:55:36
Toegewezen door GoogleCloud
CVSS-score 8.6
Status PUBLISHED

Beschrijving

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.