Historical version

This is version 2, as it stood on . It is not what this organization currently publishes — read the current version.

GCP-2026-049

Google Version 2 imported change

Imported from official source

Published: 2026-07-22Description Description Severity Notes A reflected Cross-Site Scripting (XSS) vulnerability was discovered in Google Cloud Looker. An attacker could craft a malicious URL that, when opened by an authenticated administrator, would allow the attacker to execute arbitrary scripts on their behalf and potentially compromise the administrator account. What should I do? …

This version

Version
2 of 4
Recorded
September 17, 2026 21:30
Change
Imported change
Content hash
91f08b7837a0e208a8241cbc0b7f6969
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.