src_1653fbf8e2da6d59a7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 31, 2026 17:07 UTC
- Retrieved
- Oct 08, 2026 03:51 UTC
GCP Apigee PE to Service Agent with API Proxy
GCP Apigee PE to Service Agent with API Proxy Tenable Research has identified and responsibly disclosed a privilege escalation vulnerability in Google Cloud Apigee. This vulnerability allowed an attacker with restricted Apigee permissions to exfiltrate the OAuth access token of the privileged Apigee Core Service Agent.The vulnerability stems from Apigee API Proxies' ability to execute custom JavaS
Reference details
- Source category
- Research & news
- Report title
GCP Apigee PE to Service Agent with API Proxy- First reported
- Aug 31, 2026 17:07 UTC
- Last reported
- Aug 31, 2026 17:07 UTC
- Catalog updated
- Oct 08, 2026 03:51 UTC
- Record ID
ae70c9a97a9e54999b4f6c8cfe87f5b47050aac7ce956586ed7ff289183f7ef9
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.