Dialogflow Cx

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-4764 Jun 11, 10:13 CRITICAL PATCH Act Now

Privilege escalation in Google Cloud Dialogflow CX allows authenticated users holding specific IAM roles to abuse the playbook import functionality and potentially take over the entire GCP project. Google has confirmed the issue was patched server-side on 15 March 2026 with no customer action required, and no public exploit has been identified at time of analysis.

Authentication Bypass Google Dialogflow Cx Google Cloud

NVD

CVSS 4.0

9.4

EPSS

0.0%

CVE-2026-4764

EPSS 0% CVSS 9.4

CRITICAL PATCH Act Now

Privilege escalation in Google Cloud Dialogflow CX allows authenticated users holding specific IAM roles to abuse the playbook import functionality and potentially take over the entire GCP project. Google has confirmed the issue was patched server-side on 15 March 2026 with no customer action required, and no public exploit has been identified at time of analysis.

Authentication Bypass Google Dialogflow Cx +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy