Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-12879

Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

Description

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Cloud Apigee

Default version status: unaffected

  • 0 to < 2026-06-12affected

References