VULNERABILITY INTELLIGENCE
CVE-2026-8934
EPSS probability0.51%
CISA KEVNot currently listed
Published2026-06-22
Last modified2026-10-25
Description
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.
Weakness classification
- f45cbf4e-4146-4068-b7e1-655ffc2c548c: CWE-862