Google blog.google

GCP-2026-038

Imported from official source

September 11, 2026 14:57 Security notice

Cybersecurity Classified by Officially

Published: 2026-06-22

Description

Description Severity Notes

A vulnerability was found in App Engine where the GetDashboardAppStats GraphQL private API operation in the Google Cloud console leaked cross-tenant request logs.

No action is required. This vulnerability has been fixed.

High

This is an extract. The publication continues at the source.

Read the original at the source: https://docs.cloud.google.com/support/bulletins/index#gcp-2026-038

Officially imported this from Google’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Google — imported from official source
Official source: https://cloud.google.com/feeds/google-cloud-security-bulletins.xml RSS
Imported: September 15, 2026 20:57
Versions: 1 recorded
Identity: tag:google.com,2016:google-cloud-security-bulletins#gcp-2026-038