CVE-2026-4644: Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover
A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment.
This vulnerability was patched on 11 December 2025, and no customer action is needed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Cloud Integration Connectorsto a version that resolves this vulnerability.Fixed in 2025-12-11
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must already be authenticated. The vulnerability allows that user to escalate privileges by attaching an unauthorized service account.
What is the potential impact of successful exploitation?
Successful exploitation can allow an authenticated user to take over a Google Cloud Project.
Which deployments were affected?
The issue affected the HTTP Connector in Google Cloud Integration Connectors on Google Cloud Platform before the patch dated 11 December 2025.
Is customer remediation required?
No customer action is needed, according to the provided advisory information.