Beveiligingsadvies

CVE-2026-4764

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-11 10:13:40
Laatst bijgewerkt 2026-06-11 12:41:05
Toegewezen door GoogleCloud
CVSS-score 9.4
Status PUBLISHED

Beschrijving

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was patched on 15 March 2026, and no customer action is needed.