Apigee X Security Vulnerability Affecting BigQuery DAO
securitygcpsecurity-advisorygcp-bigquery
security
A vulnerability in Apigee X's BigQuery Data Access Object allowed authenticated attackers to exfiltrate cross-tenant data. This issue has been patched and affects specific versions on Google Cloud Platform, with Apigee hybrid remaining unaffected. No customer action is required for this security fix.
Security (1) ›
- Apigee X
An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allowed an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is needed. Apigee hybrid was not affected. For more information, see CVE-2026-12879 .
Read the original announcement →
https://docs.cloud.google.com/release-notes#July_08_2026
Related releases
- Google Cloud AI Infrastructure and Orchestration Updates - July 2026 Google Cloud Blog ·
- Data Studio Conversational Analytics GA, adds BigQuery integration Google Cloud release notes ·
- Cortex Framework v7 GA with modular architecture, Dataform, and AI features Google Cloud release notes ·
- BigQuery: Audit UI query result downloads Google Cloud release notes ·
- BigQuery Data Transfer Service adds incremental Klaviyo transfers Google Cloud release notes ·
- Google Cloud Announces Borderless Lakehouse for Cross-Cloud Data Access Google Cloud Blog ·