Historical version

This is version 3, as it stood on . It is not what this organization currently publishes — read the current version.

GCP-2026-049

Google Version 3 imported change

Imported from official source

Published: 2026-07-22Description Description Severity Notes A reflected Cross-Site Scripting (XSS) vulnerability was discovered in Google Cloud Looker. An attacker could craft a malicious URL that, when opened by an authenticated administrator, would allow the attacker to execute arbitrary scripts on their behalf and potentially compromise the administrator account. What should I do? …

This version

Version
3 of 4
Recorded
September 25, 2026 09:00
Change
Imported change
Content hash
60ef3d80f9ceb3619abbf12e9e5d9390
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.