Google Cloud security advisories

16 advisories · 15 critical or high in 12 months · latest Sep 15

Advisories page

16 advisories

Date	Advisory	Severity	Fixed in
Sep 15	Google Cloud Gemini Enterprise Agent Platform SDK: remote code execution High7.7Sep 15 CVE-2026-194071.165.1	High7.7	1.165.1
Sep 11	Google Cloud Gemini Enterprise: server-side request forgery High8.7Sep 11 CVE-2026-194862026-06-01	High8.7	2026-06-01
Sep 10	Google Cloud Gemini CLI: code execution High7.7Sep 10 CVE-2026-137450.39.1	High7.7	0.39.1
Sep 9	Google Cloud Agent Development Kit (ADK) for Python: code injection Critical10.0Sep 9 CVE-2026-796962.7.0	Critical10.0	2.7.0
Sep 4	Google Cloud Agent Development Kit (ADK): path traversal High8.7Sep 4 CVE-2026-797071.22.0	High8.7	1.22.0
Sep 4	Google Cloud Integration Connectors: missing authorization High8.5Sep 4 CVE-2026-46442025-12-11	High8.5	2025-12-11
Aug 31	Google Cloud Build: improper authorization Critical9.4Aug 31 CVE-2026-194102026-06-24	Critical9.4	2026-06-24
Aug 26	Google Cloud Vertex AI Search for Commerce: weak randomness Critical9.3Aug 26 CVE-2026-194852026-04-27	Critical9.3	2026-04-27
Aug 26	Google Cloud BigQuery Data Transfer Service: improper input validation Critical9.4Aug 26 CVE-2026-127172026-05-01	Critical9.4	2026-05-01
Aug 22	Google Cloud Application Integration: missing authorization Critical9.3Aug 22 CVE-2026-127102026-04-04	Critical9.3	2026-04-04
Aug 17	Google SecOps (Chronicle SOAR): SQL injection Critical9.4Aug 17 CVE-2026-156236.3.85	Critical9.4	6.3.85
Aug 5	Google SecOps (Chronicle SOAR): privilege escalation Critical9.4Aug 5 CVE-2026-155876.3.85	Critical9.4	6.3.85
Jul 24	Google Cloud Looker: cross-site scripting High8.7Jul 24 CVE-2026-1581025.6.103+3 more	High8.7	25.6.103+3 more
Jul 17	Google Cloud Firebase Studio: missing authorization High8.5Jul 17 CVE-2026-127152026-04-15	High8.5	2026-04-15
Jul 13	Google Cloud BigQuery: missing authorization Critical9.4Jul 13 CVE-2026-149342026-05-10+2 more	Critical9.4	2026-05-10+2 more
Jul 9	Google Cloud Apigee: improper input validation Medium5.9Jul 9 CVE-2026-128792026-06-12	Medium5.9	2026-06-12

About Google Cloud

Security advisories Google Cloud publishes for its own products.

cloud.google.com/support/bulletins Google Cloud

Google Cloud elsewhere on fru.dev: Paydays · Releases

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.