CVE-2026-4764criticalCWE-862

CVE-2026-4764: falha crítica em Google Cloud Dialogflow CX

Privilege Escalation in Dialogflow CX via Playbook Import

Publicada em

Seguir esta CVE+ Monitorar Dialogflow CX

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.2%
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was patched on 15 March 2026, and no customer action is needed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear
Produtos afetados
Google Cloud · Dialogflow CX
CVEs relacionadas — Google Cloud Dialogflow CX

No mesmo produto, das mais perigosas para as menos.

CVE-2025-12952HIGHPrivilege Escalation in Dialogflow CX via Webhook Admin RoleEPSS 0.4%