Lucene search
+L

52 matches found

Kitploit
Kitploit
added 2026/09/15 3:47 a.m.11 views

run-gemini-cli

run-gemini-cli 概述 run-gemini-cli 是一个 GitHub Action,通过 Gemini CLI 将 Gemini 集成到你的开发工作流中。它既可以作为自主代理,处理关键的日常编码任务;也可以作为按需协作者,你可以快速将任务委托给它。 使用它来执行 GitHub Pull Request 审查、问题分类、代码分析与修改等操作,通过对话方式(例如 @gemini-cli fix this issue)直接在 GitHub 仓库内利用 Gemini。 run-gemini-cli 概述 功能特性 快速开始 1. 获取 Gemini API 密钥 2...

5.9AI score
SaveExploits0References17
OSV
OSV
added 2026/09/10 9:17 a.m.7 views

CVE-2026-13745

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

9.2CVSS0.00212EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 9:17 a.m.8 views

CVE-2026-13745

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

9.2CVSS0.00299EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 8:33 a.m.41 views

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

9.2CVSS0.00299EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/10 8:33 a.m.12 views

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

9.2CVSS0.00299EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 8:33 a.m.37 views

CVE-2026-13745

CVE-2026-13745 is an arbitrary code execution vulnerability in Gemini CLI and its associated GitHub Action (google-github-actions/run-gemini-cli). An unprivileged attacker can exploit untrusted local .env files that override the GEMINI_CLI_HOME environment variable to gain code execution within t...

9.2CVSS0.00299EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 8:33 a.m.14 views

EUVD-2026-75326

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

9.2CVSS0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.12 views

PT-2026-89304

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI CLI HOME...

9.2CVSS0.00299EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/19 3:50 a.m.23 views

Malicious code in gemini-cli-a2a-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb13d8d28e4c8363ceabe294b988cd42a82f1875af3f2a30310232154664afd On npm install, the package's postinstall script collects host identifiers os.hostname, platform, arch, Node version, and package/lifecycle metadata...

5.5AI score
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/08/07 8:18 a.m.18 views

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-agent repositories. On OpenAI's, it was enough to hijack the next agent run. Novee Security ran the attack against each vendor's agent in the...

10CVSS5.7AI score0.0052EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/08/05 8:23 p.m.24 views

CVE-2026-69207 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, langfuse-fips, wazuh-dashboard-fips, gemini-cli, kibana, wazuh-dashboard...

5.3CVSS6.6AI score0.00488EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/08/05 8:23 p.m.31 views

GHSA-8J4G-W8FX-2239 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, langfuse-fips, wazuh-dashboard-fips, gemini-cli, kibana, wazuh-dashboard...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/29 8:23 p.m.21 views

GHSA-FRVP-7C67-39W9 vulnerabilities

Vulnerabilities for packages: gemini-cli, librechat, kibana...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/07/13 2:36 p.m.16 views

PYSEC-2026-2475 FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

6.7CVSS6.2AI score0.00735EPSS
SaveExploits1References7
Chainguard
Chainguard
added 2026/07/06 2:17 p.m.23 views

GHSA-R275-FR43-PM7Q vulnerabilities

Vulnerabilities for packages: gemini-cli...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/07/06 2:17 p.m.23 views

CVE-2026-28291 vulnerabilities

Vulnerabilities for packages: gemini-cli...

8.1CVSS5.9AI score0.00844EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/07/06 2:17 p.m.25 views

CVE-2026-28292 vulnerabilities

Vulnerabilities for packages: gemini-cli...

9.8CVSS5.9AI score0.01296EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/07/06 2:17 p.m.24 views

GHSA-JCXM-M3JX-F287 vulnerabilities

Vulnerabilities for packages: gemini-cli...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/06/24 2:17 p.m.43 views

CVE-2026-12537

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.22 on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously...

10CVSS0.00212EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/24 1:37 p.m.176 views

CVE-2026-12537

Summary (CVE-2026-12537) : The vulnerability affects Google Gemini CLI container launcher (versions prior to 0.39.1) and the run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms. It stems from improper neutralization in an OS command, enabling an unprivileged attacker ...

10CVSS6.3AI score0.00212EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder