A missing authorization flaw in Dialogflow CX’s playbook import feature allows an authenticated user with certain roles to import a malicious playbook that effectively elevates the user’s privileges and can lead to takeover of a GCP project. The vulnerability is a direct consequence of inadequate role checks (CWE-862) and can compromise confidentiality, integrity, and availability by granting attackers authorization rights beyond their intended scope.

The flaw affects Google Cloud’s Dialogflow CX product; no specific version numbers are listed in the advisory, but the issue was addressed by Google in a patch released on March 15, 2026. Customers using Dialogflow CX prior to that date without applying the patch are potentially impacted.

The CVSS score of 9.4 reflects a high-severity, remote, authenticated attack. EPSS information is not available, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is a remote, authenticated call to the playbook import endpoint, implying that any user granted the vulnerable role could exploit the flaw from anywhere with network access to the service.