All security reports
NVD security advisoryCritical

Critical advisory for A Deserialization of Untrusted Data vuln

CVE-2026-93327 · Reported 30 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

A Deserialization of Untrusted Data vulnAffected product

Advisory overview

A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integrat | Security report | Cevnitra