CVE-2026-12710

EUVD-2026-64241
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data.




The issue was patched on April 4, 2026; no customer action is required.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 22.24%
Common Weakness Enumeration
References
https://cloud.google.com/application-integration/docs/release-notes#August_21_2026