November 23, 2025

Deployment Time: 12:00 PM PST

Features & enhancements

Item Description
Security update An SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23 allows an authenticated remote attacker to read sensitive local files and access internal network resources via crafted requests to the production cluster.

This vulnerability was patched on November, 23, 2025. No customer action is needed.

Bug fixes

None

Rollout changes

None

Preview announcements

Preview feature releases enable you to try out new app features that are not yet fully supported. See Product launch stages.

  • No new preview features were released today.

In addition, the AppSheet preview program lets app creators try out new app features that are not yet fully supported. For more details and to opt-in, see AppSheet preview program.

1 Like

November 23, 2025?

7 Likes