Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli" npm package and the "google-github-actions/run-gemini-cli" GitHub Actions workflow -- that could have allowed attackers to execute arbitrary commands on host systems. "The vulnerability allowed an...

Command Injection

Overview @google/gemini-cli is a Gemini CLI Affected versions of this package are vulnerable to Command Injection via the processing of untrusted workspace folders in headless mode and the handling of tool allowlisting under --yolo mode. An attacker can execute arbitrary code by submitting...

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

GHSA-WPQR-6V78-JR5G Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

PT-2026-51788

Name of the Vulnerable Software and Affected Versions Google Gemini CLI versions prior to 0.39.1 run-gemini-cli GitHub Action versions prior to 0.1.22 Description An OS command injection flaw exists in the container launcher used by Google Gemini CLI and the run-gemini-cli GitHub Action when...

Malicious code in gemini-cli-vscode-ide-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...

MAL-2026-2764 Malicious code in gemini-cli-vscode-ide-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...

CVE-2026-39406 vulnerabilities

Vulnerabilities for packages: librechat, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

GHSA-R5RP-J6WH-RVV4 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

GHSA-XPCF-PG52-R92G vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

CVE-2026-39407 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

GHSA-26PP-8WGV-HJVM vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

CVE-2026-39409 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

CVE-2026-39410 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

GHSA-XF4J-XP2R-RQQX vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, kibana, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

GHSA-M8X7-R2RG-VH5G FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

CVE-2026-4926 vulnerabilities

Vulnerabilities for packages: vitess, wazuh-dashboard, thingsboard, tileserver-gl-fips, opensearch-dashboards-fips, redisinsight, code-server, tileserver-gl, kibana, saf, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...

GHSA-27V5-C462-WPQ7 vulnerabilities

Vulnerabilities for packages: vitess, wazuh-dashboard, thingsboard, tileserver-gl-fips, opensearch-dashboards-fips, redisinsight, code-server, tileserver-gl, kibana, saf, langfuse-fips, gemini-cli, opensearch-dashboards, langfuse...