Is CVE-2026-84962 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84962?

CVE-2026-84962 has a CVSS v3 severity of MEDIUM (4.2).

Back

CVE-2026-84962

Description

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption.