Gemini Enterprise Agent Platform Security Update
A Server-Side Request Forgery (SSRF) vulnerability in Agent Studio's auto-generated API proxy backend has been fixed. This addresses a potential security risk for web applications generated before July 1, 2026. Users who created applications before this date should regenerate and redeploy their apps from Agent Studio to incorporate the security patch, which includes strict domain allowlist validation.
Security (1) ›
- Gemini Enterprise Agent Platform Security update for Server-Side Request Forgery (SSRF) in Agent Studio
Security update for Server-Side Request Forgery (SSRF) in Agent Studio This release fixes a Server-Side Request Forgery (SSRF) vulnerability in the auto-generated /api-proxy backend endpoint for web applications created before July 1, 2026, using Agent Studio. If you downloaded, generated, or deployed web application code from Agent Studio before July 1, 2026, regenerate the app from Agent Studio and deploy the new version. For more information, see Quickstart: Deploy your Agent Studio prompt as a web application The updated backend code includes strict domain allowlist validation, ensuring th
https://docs.cloud.google.com/release-notes#July_20_2026
Related releases
- Google Cloud AI Infrastructure and Orchestration Updates - July 2026 Google Cloud Blog ·
- Confidential VMs Expand vCPU Support on C3D/C4D Google Cloud release notes ·
- Google Kubernetes Engine: New versions and deprecations Google Cloud release notes ·
- Datastream adds preview support for Workday replication Google Cloud release notes ·
- Google Cloud CISO Perspectives: AI Threat Defense for Boards Google Cloud Blog ·
- Data Studio Conversational Analytics GA, adds BigQuery integration Google Cloud release notes ·