GCP-2026-056
Imported from official source
Published: 2026-08-26Description Description Severity Notes An Improper Input Validation vulnerability was discovered in the JDBC driver in BigQuery Data Transfer Service versions prior to May 1, 2026. What should I do? No customer action is required. This vulnerability was patched on May 1, 2026. What vulnerabilities are being addressed? An authenticated attacker could use crafted JDBC connection string parameters to achieve remote code execution in the connector container and escalate privileges in the tenant project. Critical CVE-2026-12717
This version
- Version
- 1 of 3
- Recorded
- September 15, 2026 20:57
- Change
- Initial
- Content hash
50cd7d796238e48e21b0f81e03aeef74- All versions
- Revision history