Skip to content

Product

Google Cloud Dialogflow CX vulnerabilities

2 published CVES affecting Google Cloud Dialogflow CX, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Google Cloud Dialogflow CX CVEs

Newest publication first

  1. CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import

    Published
    CriticalCVSS 9.4 EPSS 0.21%

    A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This v...

  2. CVE-2025-12952 Privilege Escalation in Dialogflow CX via Webhook Admin Role

    Published
    HighCVSS 8.7 EPSS 0.31%

    A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.