CVE-2026-12879 — Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy
An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfil…
Published: 2026-07-09 · CVSS: 5.9 · CVSS 4.0
An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7