CVE-2026-19486

Google Cloud's Gemini Enterprise Agent Platform App Builder contains a server-side request forgery (SSRF, CWE-918) in versions prior to 2026-06-01, exploitable by unauthenticated attackers with network access to an affected deployment. Because the flaw requires no authentication, privileges, or user interaction, an attacker can induce server-side requests and retrieve the Compute Engine default service account access token. With that token, the attacker can call Google Cloud APIs with whatever permissions the Compute Engine default service account holds, driving the high confidentiality impact reflected in the 8.7 CVSS 4.0 score. Any organization running apps deployed via App Builder on Google Cloud Platform before the 1 June 2026 fix is affected, and customers must redeploy their previously deployed apps to pick up the remediation. No public proof-of-concept or confirmed in-the-wild exploitation is known at this time.

What to do: Redeploy all previously deployed App Builder apps on the patched platform (fix dated 1 June 2026), since patching alone does not update already-deployed apps. Review Cloud Audit Logs for unexpected issuance or use of the Compute Engine default service account access token and audit the IAM permissions and OAuth scopes attached to the default service account. Until redeployment is complete, restrict network access to affected apps to trusted networks.