Medium nvd · CVE-2026-103340

CVE-2026-103340: Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Ac

Published Oct 1, 2026 CVSS 5.3

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

Auth Bypass

Affected AI Products

gemini

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.