CVE-2026-81867

CRITICAL 9.4CVE-2026-81867 · Published 28/09/2026 · updated 30/09/2026

In short

CVE-2026-81867 is a CRITICAL (CVSS 9.4) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially crafted script bypassing param guards. This vulnerability was patched on 28 June 2026, and no customer action is needed.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free