Critical severityNVD Advisory· Published Oct 30, 2026

CVE-2026-93327

Description

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object.

This vulnerability was patched on 11 September 2026, and no customer action is needed.

Patches

Vulnerability mechanics

References

docs.cloud.google.com/support/bulletinsnvd

News mentions

No linked articles in our index yet.