CVE-2026-81375

— UNSCORED

Published 2026-09-28 · Updated 2026-09-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

Weaknesses

CWE-610

All references

https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-066
https://docs.cloud.google.com/support/bulletins#gcp-2026-066

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-95376

Related by shared AI tags and CWE weakness class. Browse the full archive.