CVE-2026-3136 in Cloudinformação

Sumário

de MITRE • 03/03/2026

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment.

This vulnerability was patched on 26 January 2026, and no customer action is needed.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsável

GoogleCloud

Reservar

24/02/2026

Divulgação

03/03/2026

Moderação

aceite

Entrada

VDB-348567

CPE

pronto

EPSS

0.00368

KEV

não

Atividades

muito baixo

Fontes

Do you want to use VulDB in your project?

Use the official API to access entries easily!