https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:18:01 +0000 https://cve.radiocsirt.org/vuln/cve-2025-12952 <p><strong>Affected:</strong> Google Cloud Dialogflow CX</p> <p>A privilege escalation vulnerability exists in Google Cloud&#39;s Dialogflow CX.</p> <p>Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level to project-level, granting them unauthorized access to manage resources in services associated with the project, leading to unexpected costs and resource depletion for the producer project.</p> <p>A fix was applied on the server side to protect from this vulnerability in February 2025. No customer action is required.</p> <p><strong>Affected:</strong> Google Cloud Dialogflow CX</p> <p>A privilege escalation vulnerability exists in Google Cloud&#39;s Dialogflow CX.</p> <p>Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escalate their privileges from agent-level to project-level, granting them unauthorized access to manage resources in services associated with the project, leading to unexpected costs and resource depletion for the producer project.</p> <p>A fix was applied on the server side to protect from this vulnerability in February 2025. No customer action is required.</p> https://cve.radiocsirt.org/vuln/cve-2025-12952