Google Cloud Update Version 20260511.00

On May 20, 2026, Google published security bulletin GCP-2026-034 for Apigee. It addresses CVE-2026-2264, an SSRF issue in `SetIntegrationRequest` that could expose service account tokens.

• Apigee vulnerability CVE-2026-2264: IntegrationRegion in SetIntegrationRequest lacks validation, enabling Server-Side Request Forgery (SSRF) and service account token exfiltration when an attacker controls the flow variable.
• Security bulletin GCP-2026-034 published for Apigee.

• Guest Environment guest agent version 20260511.00 is a rebuild of 20260423.01 with no additional changes; it restarts the agent to recover from an erroneous core plugin removal request that broke SSH and Windows password reset features.

• BigQuery Python UDFs are now Generally Available (GA).
• BigQuery AI.AGG is available in Preview for semantic aggregation of unstructured input data.
• Cloud Service Mesh now supports a limited implementation of the EnvoyFilter API in the stable channel for managed TRAFFIC_DIRECTOR deployments.
• Cloud Service Mesh can now report whether an Istio API is accepted or rejected via status codes on the resource and mesh state.
• Confidential Space image 260500 adds support for Intel Trust Authority (ITA) as an independent attestation verifier service.
• Gemini Enterprise Agent Platform now supports supervised fine-tuning for Gemini 3.1 Flash Lite in Preview.
• Supervised fine-tuning now supports Part-level mediaResolution declarations, including MEDIA_RESOLUTION_ULTRA_HIGH, for images, videos, and PDFs.
• Oracle Database@Google Cloud now supports Oracle Cloud Infrastructure GoldenGate for data replication and transformation.
• Secret Manager and Parameter Manager integrate with the Agent Development Kit (ADK) to retrieve secrets and parameters securely at runtime.

• BigQuery re-executions of queries have no side effects and no additional cost; data access logs may show bigquery-adminbot@system.gserviceaccount.com.
• Gemini 3.1 Flash Lite supervised fine-tuning is limited to us-central1 and europe-west4, with serving restricted to the US and EU multi-region endpoints.
• Google Cloud VMware Engine ve1 committed use discounts are end-of-sale in europe-west2; existing CUDs remain valid and ve1 nodes can still be used with on-demand pricing.
• NotebookLM Enterprise Podcast API is deprecated and Google is not allowlisting new customers.

Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: 20260511.00

Vendor release date: May 20, 2026

Published on updatealert.io: Jun 4, 2026

Description: Cloud platform for compute, data, networking, and developer services.