NVD security advisoryCritical
Critical advisory for A Deserialization of Untrusted Data vuln
CVE-2026-93327 · Reported 30 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
A Deserialization of Untrusted Data vulnAffected product
Advisory overview
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was patched on 11 September 2026, and no customer action is needed.
