XSS in Google Cloud Looker

CVE-2026-15810

A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7 on Looker-hosted and Self-hosted allows an attacker to execute arbitrary JavaS…

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Weakness classification (CWE)

References