VULNERABILITY INTELLIGENCE

CVE-2026-81375

CVSS score8.3 HIGH

EPSS probability0.46%

CISA KEVNot currently listed

Published2026-09-28

Last modified2026-09-29

Description

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability wa…