CVE-2026-8934
NONE—CVSS v3
—CVSS v2
0.51%
EPSS (exploit probability)
CWE-862CWE
Description
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request.
This vulnerability was patched on 7 April 2026, and no customer action is needed.
Affected routers (0)
No routers currently mapped to this CVE in our database.