High severityNVD Advisory· Published Sep 4, 2026

CVE-2026-4644

Description

A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment.

This vulnerability was patched on 11 December 2025, and no customer action is needed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Google Cloud Platformllm-create
Range: <2025-12-11
Google Cloud Platform/Google Cloud Integration Connectorsllm-fuzzy
Range: <2025-12-11

Patches

Vulnerability mechanics

References

docs.cloud.google.com/support/bulletinsnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000