CVE-2026-93327
Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.
| CWE | CWE-502 |
| Vendor | google cloud |
| Product | application integration |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for google cloud application integration
Be the first to know when new unknown vulnerabilities affecting google cloud application integration are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google Cloud / Application Integration
0 < 2026-09-11
References
Credits
🔍 Saurav Bhattarai