CVE-2026-2031 — Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.

CVE-2026-2031

Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution. PUBLISHED

Description (CNA)

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.

Affected (CNA)

Vendor / product	Versions
Google Cloud / Internal Integration Platform APIs	affected 0 before 2026-01-23

CWE

CWE-862

References

https://docs.cloud.google.com/gemini/enterprise/docs/release-notes#May_07_2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.