CVE-2026-19486 Google Cloud CVE debrief

Who should care

Defenders responsible for Google Cloud Gemini Enterprise Agent Platform App Builder deployments should assess exposure and apply the patch to prevent potential SSRF attacks. Defenders should prioritize verifying exposure of Gemini Enterprise Agent Platform App Builder deployments and applying the patch. This vulnerability affects Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform. Operators, and

Why it matters

Defenders should prioritize verifying exposure of Gemini Enterprise Agent Platform App Builder deployments and applying the patch to prevent potential SSRF attacks, as an unauthenticated attacker could leak the Compute Engine default service account access token.

• Potential leak of Compute Engine default service account access token
• Possible SSRF attacks on Gemini Enterprise Agent Platform App Builder deployments

Technical summary

A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. The vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps to prevent potential SSRF attacks. Defenders should prioritize verifying exposure of Gemini Enterprise Agent Platform App Builder deployments and applying the patch.

Defensive priority

Defenders should prioritize verifying exposure of Gemini Enterprise Agent Platform App Builder deployments and applying the patch to prevent potential SSRF attacks.

Recommended defensive actions

• Verify Gemini Enterprise Agent Platform App Builder deployments for exposure
• Apply the patch to prevent potential SSRF attacks
• Redeploy previously deployed apps
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps. The patch was applied to prevent potential SSRF attacks. Defenders should verify exposure and apply the patch. The Compute Engine default service account access token could be leaked by an unauthenticated attacker. This issue affects Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.