CVE-2026-84962
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption.
- Published Sep 3, 2026
- CVSS 5.7 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)