CVE-2026-19410

UNKNOWN 0.0

Google Cloud Build Comment Control Bypass via Webhook Suppression

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute unreviewed code in the build environment using webhook suppression. This vulnerability was patched on 24 June 2026, and no customer action is needed.

CWE	CWE-367 CWE-345
Vendor	google cloud
Product	google cloud build
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for google cloud google cloud build

Be the first to know when new unknown vulnerabilities affecting google cloud google cloud build are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Google Cloud / Google Cloud Build

0 < 2026-06-24

References

NVD ↗ CVE.org ↗ EPSS Data ↗

docs.cloud.google.com: https://docs.cloud.google.com/build/docs/release-notes#August_24_2026

Credits

🔍 inspector-ambitious