一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-85298 – An Incorrect Authorization vulnerability in the AuthConfig validation and integration exec

未分类
📑 文章目录

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project.

This vulnerability was patched on 27 August 2026, and no customer action is needed.