Dataform Security Vulnerability in BigQuery and Colab Enterprise
datasecuritygcpengineergcp-bigquery
security
A security vulnerability was found in Dataform repositories within BigQuery and Colab Enterprise, allowing authenticated attackers to escalate privileges and take over cross-tenant repositories. This impacts users of Dataform, BigQuery, and Colab Enterprise. Further details are available in the GCP-2026-047 security bulletin.
Security (1) ›
- Dataform
A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Enterprise. An authenticated attacker could potentially escalate permissions and perform cross-tenant repository takeover. For more information, see the GCP-2026-047 Dataform security bulletin.
Read the original announcement →
https://docs.cloud.google.com/release-notes#July_13_2026
Related releases
- BigQuery Enhances Compliance, Graph Processing, and XGBoost ML Capabilities Google Cloud release notes ·
- BigQuery Addresses Security Vulnerability and Adds Real-time Python UDF Logging Google Cloud release notes ·
- Terraform Google Provider v8.0.0 introduces significant breaking changes Terraform Google Provider Releases ·
- Google Cloud enhances Knowledge Catalog for managing Open Knowledge Format (OKF) bundles Google Cloud Blog ·
- BigQuery Data Governance Tags Now Supported in Terraform Google Cloud release notes ·
- BigQuery Integrates Google Cloud Observability for Data Agent Monitoring Google Cloud release notes ·