Google Cloud Dialogflow CX Messenger Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass in Google Cloud Dialogflow CX Messenger integration was identified. This issue enabled unauthenticated users to interact with restricted chat agents, access their knowledge, and trigger intents by manipulating initialization parameters or crafting specific API requests. All versions released after August 20, 2025, have been patched, and no user action is required.

Impact

Exploitation of this vulnerability allowed unauthorized access to restricted chat agents, enabling interaction with the agents' knowledge and the ability to trigger their intents.