{"id":"CVE-2026-93327","published":"2026-10-30T15:16:56.867","lastModified":"2026-10-30T19:37:07.073","description":"A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object.\n\n\nThis vulnerability was patched on 11 September 2026, and no customer action is needed.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://docs.cloud.google.com/support/bulletins","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}