Google BigQuery Materialized View Refresh Vulnerability Allowing Sensitive Data Disclosure
Vulnerability
A vulnerability in the Materialized View Refresh mechanism of Google BigQuery on Google Cloud Platform can lead to unauthorized disclosure of sensitive information. This issue arises when an authenticated user creates a materialized view designed to trigger a runtime error during the refresh process, potentially exposing confidential data. The vulnerability has been addressed as of January 29, 2026, and does not require any action from customers.
Impact
The vulnerability could result in the unintended exposure of sensitive data through error messages generated during the materialized view refresh process.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.