CVE-2026-2031: Google Cloud Internal Integration Platform Apis

Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days.

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive internal information and execute arbitrary code using specially crafted HTTP requests to inadvertently exposed internal API endpoints.

Affected products

• Google Cloud Internal Integration Platform Apis: before 2026-01-23 (fixed in 2026-01-23)

Published 2026-05-15. Last modified 2026-06-17.