CVE-2026-12879 — Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

CVE-2026-12879

Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy PUBLISHED

Description (CNA)

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.

Affected (CNA)

Vendor / product	Versions
Google Cloud / Apigee	affected 0 before 2026-06-12

CWE

CWE-610, CWE-441

References

https://cloud.google.com/apigee/docs/release-notes#July_08_2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.