A Deserialization of Untrusted Data vulnerability was discovered in the SubWorkflow task in Application Integration versions prior to September 11, 2026.

Application Integration agent skills

Application Integration agent skills are available in the public google/skills repository: application-integration-basics, application-integration-authoring, and application-integration-troubleshooting.

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27,…

An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27, 2026. For more information, see the GCP-2026-068 security bulletin.

Starting October 15, 2026, Application Integration enforces security fixes for IAM, run-as service accounts, and iam.serviceAccounts.actAs checks, requiring…

Starting October 15, 2026, Application Integration enforces security fixes for IAM, run-as service accounts, and iam.serviceAccounts.actAs checks, requiring the correct permissions for the test feature and any new integrations.

A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration versions prior to June 30, 2026.

For more information, see the GCP-2026-066 security bulletin.

A Deserialization of Untrusted Data vulnerability was discovered in the JavaScript Task in Application Integration versions prior to June 28, 2026.

For more information, see the GCP-2026-065 security bulletin.