---
id: CVE-2025-13292
title: >-
  A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and
  write access to Apigee Analytics (AX) data and access logs belonging to other
  Apigee customer organizations.


  Apigee-X was found to be vulnerable.


  This vulner…
summary: >-
  A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and
  write access to Apigee Analytics (AX) data and access logs belonging to other
  Apigee customer organizations.


  Apigee-X was found to be vulnerable.


  This vulner…
severity: none
cwe:
  - CWE-269
published: '2025-12-06'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:10:00.327'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-13292'
references:
  - url: 'https://docs.cloud.google.com/apigee/docs/release-notes#October_16_2025'
    label: f45cbf4e-4146-4068-b7e1-655ffc2c548c
  - url: >-
      https://focalsecurity.io/blog/gatewaytoheaven-gcp-cross-tenant-vulnerability/
    label: f45cbf4e-4146-4068-b7e1-655ffc2c548c
tags:
  - nvd
epss: 0.00275
epssPercentile: 0.198
ingestedAt: '2026-10-27T18:12:09.283Z'
---

## Overview

A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizations.

Apigee-X was found to be vulnerable.

This vulnerability was patched in version 1-16-0-apigee-3. No user action is required for this.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.