Auth bypass in Google Cloud Dialogflow Cx
CVE-2026-4764
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a ma…
Vulnerability class: Broken Access Control
EPSS: 0.002 (10.9th percentile) — read the EPSS interpretation.
Affected products
- Google Cloud Dialogflow Cx — versions 0