CVE-2026-12710 — Missing Authorization in Application Integration QueryEngineTask

CVE-2026-12710

Missing Authorization in Application Integration QueryEngineTask PUBLISHED

Description (CNA)

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.

Affected (CNA)

Vendor / product	Versions
Google Cloud / Application Integration	affected 2025-04-28 before 2026-04-04

CWE

CWE-862

References

https://cloud.google.com/application-integration/docs/release-notes#August_21_2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.