Medium nvd · CVE-2026-110366

CVE-2026-110366: Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Ac

Published Oct 16, 2026 CVSS 5.3

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.

Auth Bypass

Affected AI Products

gemini

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.