PT-2026-51347 · Google · App Engine Cloud Console

Arvin Shivram + 1 · Published 2026-06-22 · Updated 2026-06-22 · CVE-2026-8934

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Clear

Name of the Vulnerable Software and Affected Versions Google App Engine Cloud Console (affected versions not specified)

Description A missing authorization issue in a GraphQL private API operation within the Google App Engine section of the Cloud Console enables an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects by sending a specially crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-8934

Affected Products

App Engine Cloud Console

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-8934 · Security Note
• https://twitter.com/VulmonFeeds/status/2069128365827584236 · Twitter Post
• https://docs.cloud.google.com/support/bulletins#gcp-2026-038 · Note