Auth bypass in Google Cloud Console Uis
CVE-2026-8934
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a…
Vulnerability class: Broken Access Control
Affected products
- Google Cloud Console Uis — versions 0