CVE-2026-85298: Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation
Published Oct 14, 2026
·Updated
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project.
This vulnerability was patched on 27 August 2026, and no customer action is needed.
Affected Software
1 affected component
Google Cloud Application Integration<2026-08-27
Event History
Oct 14, 2026
CVE Published
via MITRE·11:14 AM
Data Sourced
via MITRE·11:14 AM
DescriptionWeakness
Frequently Asked Questions
1
Who could exploit this issue?
An authenticated user of Google Cloud Application Integration could exploit the issue to escalate privileges and impersonate a service account in the project.
2
Which deployments are affected?
Google Cloud Application Integration versions prior to 2026-08-27 were affected. The issue was patched on 27 August 2026.
3
Is customer remediation required?
No customer action is needed, according to the provided advisory information.