What’s Vulnerable › Products

Google SAM vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Google SAM version is affected

Latest Google SAM vulnerabilities

• CVE-2026-103090 — Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM) (CVSS 8.8)
• CVE-2026-103091 — Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM) (CVSS 9.3)
• CVE-2026-102503 — Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM) (CVSS 9.3)