CVE-2026-4644
NONE—CVSS v3
—CVSS v2
0.23%
EPSS (exploit probability)
CWE-863CWE
Description
A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud Platform allows an authenticated user to escalate privileges and take over a Google Cloud Project using unauthorized service account attachment.
This vulnerability was patched on 11 December 2025, and no customer action is needed.
Affected routers (0)
No routers currently mapped to this CVE in our database.