run-gemini-cli

run-gemini-cli Overview run-gemini-cli is a GitHub Action that integrates Gemini into your development workflow via the Gemini CLI. It acts both as an autonomous agent for critical routine coding tasks, and an on-demand collaborator you can quickly delegate work to. Use it to perform GitHub pull...

CVE-2026-117560

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560

The ATXP Gemini CLI extension (through version 1.0.0 ) contains an OS command injection vulnerability within the runAtxp() function. The root cause is the processing of unsanitized MCP tool parameters , which allows an attacker to execute shell commands as the user. Specifically, attackers can pl...

CVE-2026-117560

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

EUVD-2026-110838

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

PT-2026-126419

Name of the Vulnerable Software and Affected Versions ATXP Gemini CLI extension versions prior to 1.0.1 Description An OS command injection issue exists in the runAtxp function. The software fails to sanitize MCP tool parameters, allowing attackers to execute shell commands as the user. This can ...

GHSA-27R3-JXMH-P828 vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, wazuh-dashboard-fips, code-server, arangodb, langfuse-fips, unleash-fips, pelias-api, kibana, kubescape-grype-offline-db, dotstatsuite-supercore, opensearch-dashboards, unleash, unleash-proxy, eco-jess, node-red, argo-workflows,...

CVE-2026-111181 vulnerabilities

Vulnerabilities for packages: langfuse, redisinsight, wazuh-dashboard-fips, code-server, arangodb, langfuse-fips, unleash-fips, pelias-api, kibana, kubescape-grype-offline-db, dotstatsuite-supercore, opensearch-dashboards, unleash, unleash-proxy, eco-jess, node-red, argo-workflows,...

Ring-0 by Default: Agents As Operating Systems (AaOS)

LLM agents now read and write files, start processes and subagents, fetch network content, load third-party extensions, and save and resume state, which are the responsibilities of an operating system. They gained these functions within about three years, but not the protections that operating...

Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents

Coding agents that run long enough must compact their context, summarizing the conversation, discarding the original, and carrying the summary forward as memory. We show that in popular open-source coding agents this step is an exploitable trust boundary. Harnesses that flatten the typed...

GHSA-PQG4-J6R4-53MV vulnerabilities

Vulnerabilities for packages: eco-jess, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, renovate, gitlab-rails-ce, gemini-cli, code-server, arangodb...

CVE-2026-102422 vulnerabilities

Vulnerabilities for packages: eco-jess, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, renovate, gitlab-rails-ce, gemini-cli, code-server, arangodb...

GHSA-JJ69-4GRX-FQJ5 vulnerabilities

Vulnerabilities for packages: gemini-cli...

CVE-2026-56762 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, gemini-cli, opensearch-dashboards, langfuse-fips...

GHSA-55CM-P4WW-685G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, gemini-cli, opensearch-dashboards, langfuse-fips...

CVE-2026-12537 vulnerabilities

Vulnerabilities for packages: gemini-cli...

Security Bulletin: Multiple Vulnerabilities in IBM Bob

Summary Multiple vulnerabilities were addressed in IBM Bob V 2.1.0 Vulnerability Details CVEID:CVE-2026-12537 DESCRIPTION: Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.2...