CVE-2026-85298EPSS p28.3%

CVE-2026-85298CVE-2026-85298

Description

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was patched on 27 August 2026, and no customer action is needed.

Scoring

EPSS0.36% probability of exploitation · percentile 28.3% · 2026-10-15T12:03:56Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.