Google Cloud Build GitHub Trigger Comment Control Improper Authorization Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability allowing improper authorization has been identified in the GitHub Trigger Comment Control feature of Google Cloud Build, affecting versions prior to January 26, 2026. This vulnerability enables remote attackers to execute arbitrary code within the build environment.
Impact
Exploitation of this vulnerability allows for arbitrary code execution in the build environment.
Added: Mar 3, 2026, 5:18 PM
Updated: Mar 3, 2026, 10:33 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.6remediation
0.0relevance
3.4threat
0.0urgency
0.0incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.