Vulnerability Description
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was patched on 15 March 2026, and no customer action is needed.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-4764?
CVE-2026-4764 is a documented vulnerability. A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potenti...
How severe is CVE-2026-4764?
CVSS scoring is not yet available for CVE-2026-4764. Check NVD for updates.
Is there a patch for CVE-2026-4764?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.