Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

GHSA-WPQR-6V78-JR5G Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...

PT-2026-51788

Name of the Vulnerable Software and Affected Versions Google Gemini CLI versions prior to 0.39.1 run-gemini-cli GitHub Action versions prior to 0.1.22 Description An OS command injection flaw exists in the container launcher used by Google Gemini CLI and the run-gemini-cli GitHub Action when...

Malicious code in gemini-cli-vscode-ide-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...

MAL-2026-2764 Malicious code in gemini-cli-vscode-ide-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...

GHSA-R5RP-J6WH-RVV4 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

GHSA-XPCF-PG52-R92G vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-39406 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

CVE-2026-39409 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

GHSA-26PP-8WGV-HJVM vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-39407 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

GHSA-XF4J-XP2R-RQQX vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-39410 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

GHSA-M8X7-R2RG-VH5G FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

CVE-2026-4926 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, vitess, redisinsight, opensearch-dashboards-fips, code-server, thingsboard, opensearch-dashboards, saf, tileserver-gl, tileserver-gl-fips, wazuh-dashboard...

CVE-2026-4923 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, vitess, redisinsight, opensearch-dashboards-fips, code-server, thingsboard, opensearch-dashboards, saf, tileserver-gl, tileserver-gl-fips, wazuh-dashboard...

GHSA-27V5-C462-WPQ7 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, gemini-cli, vitess, redisinsight, opensearch-dashboards-fips, code-server, thingsboard, opensearch-dashboards, saf, tileserver-gl, tileserver-gl-fips, wazuh-dashboard...