Back to search
CVE-2026-3136
Published: Mar 3, 2026
Modified: Mar 4, 2026
PUBLISHED
Description
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.
| Vendor | Product | Versions |
|---|---|---|
Google Cloud | Cloud Build | affected 0 - < 1/26/2026 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now