BigQuery Data Transfer Service JDBCドライバーにRCE・権限昇格の脆弱性Security An Improper Input Validation vulnerability was discovered in the JDBC driver in BigQuery Data Transfer Service versions prior to May 1, 2026. An authenticated attacker could use crafted JDBC connection string parameters to achieve remote code execution in the connector container and escalate privileges in the tenant project. For more information, see the GCP-2026-056 security bulletin.BigQuery release notesで原文を確認
