Auth bypass in Google Cloud Console Uis

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a…

Vulnerability class: Broken Access Control

Affected products

Weakness classification (CWE)

References