Critical severityNVD Advisory· Published Aug 31, 2026

CVE-2026-19410

Description

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression.

This vulnerability was patched on 24 June 2026, and no customer action is needed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Cloud Buildllm-fuzzy
Range: <2026-06-24

Patches

Vulnerability mechanics

References

docs.cloud.google.com/build/docs/release-notesnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000