Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-8934 Missing Authorization in Google App Engine Cloud Console GraphQL API Allows Log Leakage https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8934
Post summary
A new CVE (CVE-2026-8934) is disclosed, detailing missing authorization in the Google App Engine Cloud Console GraphQL API that leads to log leakage, with no PoC, exploit, or mitigation information provided.