CVE-2026-85298
Description
A flaw was found in Google Cloud Application Integration. An improper authorization flaw in the authentication configuration (AuthConfig) validation and integration execution runtime allows an authenticated user to escalate privileges. By exploiting this vulnerability, an attacker can impersonate a project service account and gain unauthorized access to project resources.
Statement
This vulnerability is evaluated with an Important severity impact because an authenticated remote attacker could bypass access controls to impersonate privileged service accounts across cloud environments. Google Cloud Application Integration is a proprietary, cloud-hosted platform service managed by Google rather than software distributed within Red Hat products. Consequently, Red Hat enterprise offerings are not directly exposed to or affected by this issue.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
