VULNERABILITY INTELLIGENCE
CVE-2026-19410
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-08-31
Last modified2026-08-31
Description
An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression. This vulnerability was patched on 24 June 2026, and no customer action is needed.
Weakness classification
- f45cbf4e-4146-4068-b7e1-655ffc2c548c: CWE-345