Google Cloud BigQuery Data Transfer Service vulnerabilities

Latest Google Cloud BigQuery Data Transfer Service CVEs

Newest publication first

1. CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

   Published 2026-08-26

   Critical·CVSS 9.4 EPSS 0.62%

   An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escala...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.