Medium severityNVD Advisory· Published Jun 22, 2026· Updated Jun 22, 2026
CVE-2026-8934
CVE-2026-8934
Description
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request.
This vulnerability was patched on 7 April 2026, and no customer action is needed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
1- Researcher Hacked Google Using AI and Earned $500,000 Bug BountyCyber Security News · Jun 11, 2026