CVE-2026-14934:详情

CVE-2026-14934

2026-07-13
11h16 +00:00
Authorization problems
A01-Broken Access Control
2026-07-13
19h49 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tenant repository takeover. This vulnerability was patched on 10 May 2026, and no customer action is needed.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

参考资料