Dialogflow CX vulnerabilities

2 known vulnerabilities in Dialogflow CX from Google Cloud. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Dialogflow CX: Missing Authorization

  CVE-2026-4764Jun 11, 2026Google Cloud

  A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted pla

• 8.7 High severity

  Dialogflow CX: Improper Privilege Management

  CVE-2025-12952Dec 10, 2025Google Cloud

  A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. This allows the attacker to escal