CVE-2026-2031: Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2031?
CVE-2026-2031 has been classified as a critical vulnerability due to its potential for information disclosure and remote code execution.
How do I fix CVE-2026-2031?
To mitigate CVE-2026-2031, upgrade Google Cloud Application Integration to a version later than 2026-01-23.
What type of attacks can CVE-2026-2031 enable?
CVE-2026-2031 can enable attackers to conduct information disclosure attacks and potentially execute arbitrary code remotely.
What are the affected versions of Google Cloud Application Integration for CVE-2026-2031?
CVE-2026-2031 affects versions of Google Cloud Application Integration prior to 2026-01-23.
Who is impacted by CVE-2026-2031?
Organizations using affected versions of Google Cloud Application Integration prior to the patch release are at risk due to CVE-2026-2031.