Vulnerability Bulletins

CVE-2026-4764

   
Affected software GOOGLE
 
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import.


This vulnerability was patched on 15 March 2026, and no customer action is needed.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-4764