CVE-2026-12879

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.

Score

CVSS 4.0 5.9 Medium

Status

Awaiting Analysis - f45cbf4e-4146-4068-b7e1-655ffc2c548c

Published

2026-07-09

Last modified

2026-10-25

Weaknesses

CWE-441, CWE-610

Affected products

• Apigee (Google Cloud)

References

• https://cloud.google.com/apigee/docs/release-notes#July_08_2026