68 matches found
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, renovate, sqlpad, librechat, code-server, gemini-cli, redisinsight, wazuh-dashboard, argo-workflows, arangodb, kubeflow-pipelines, dbgate-fips, gitlab-rails-ce, langfuse, nemo, npm, tensorflow-gpu-jupyter, prism, opensearch-dashboards-fips,...
GHSA-WPQR-6V78-JR5G vulnerabilities
Vulnerabilities for packages: gemini-cli...
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli" npm package and the "google-github-actions/run-gemini-cli" GitHub Actions workflow -- that could have allowed attackers to execute arbitrary commands on host systems. "The vulnerability allowed an...
@13w/local-rag (2.0.0), @amodalai/cli (>=0.1.0, <=0.1.1) +33 more potentially affected by unknown CVE via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)
@google/gemini-cli NPM version =0.1.17, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =0.3.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-GOOGLEGEMINICLI-16301693...
@13w/local-rag (2.0.0), @amodalai/cli (>=0.1.0, <=0.1.1) +33 more potentially affected by CVE-2026-12537 via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)
@google/gemini-cli NPM version =0.1.17, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =0.3.0 and more Source cves: CVE-2026-12537 Source advisory: OSV:GHSA-WPQR-6V78-JR5G...
GHSA-WPQR-6V78-JR5G Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...
Command Injection
Overview @google/gemini-cli is a Gemini CLI Affected versions of this package are vulnerable to Command Injection via the processing of untrusted workspace folders in headless mode and the handling of tool allowlisting under --yolo mode. An attacker can execute arbitrary code by submitting...
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Summary Gemini CLI @google/gemini-cli and the run-gemini-cli GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive headless environment...
PT-2026-51788
Name of the Vulnerable Software and Affected Versions Google Gemini CLI versions prior to 0.39.1 run-gemini-cli GitHub Action versions prior to 0.1.22 Description An OS command injection flaw exists in the container launcher used by Google Gemini CLI and the run-gemini-cli GitHub Action when...
PT-2026-89304
Name of the Vulnerable Software and Affected Versions @google/gemini-cli versions prior to 0.39.1 run-gemini-cli GitHub Action affected versions not specified Description An issue in the Gemini CLI and the associated GitHub Action allows an unprivileged attacker to achieve arbitrary code executio...
PT-2026-37208
Name of the Vulnerable Software and Affected Versions @google/gemini-cli versions prior to 0.39.1 run-gemini-cli affected versions not specified Description Issues exist in the handling of workspace trust and tool allowlisting when running in headless mode, such as within CI/CD environments. In...
Malicious code in gemini-cli-vscode-ide-companion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...
MAL-2026-2764 Malicious code in gemini-cli-vscode-ide-companion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1 The package gemini-cli-vscode-ide-companion was found to contain malicious code...
CVE-2026-39409 vulnerabilities
Vulnerabilities for packages: langfuse, gemini-cli, kibana, opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, librechat...
CVE-2026-39406 vulnerabilities
Vulnerabilities for packages: langfuse, gemini-cli, kibana, opensearch-dashboards-fips, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards, langfuse-fips, librechat...
CVE-2026-39407 vulnerabilities
Vulnerabilities for packages: langfuse, gemini-cli, kibana, opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, librechat...
CVE-2026-39410 vulnerabilities
Vulnerabilities for packages: langfuse, gemini-cli, kibana, opensearch-dashboards-fips, opensearch-dashboards, langfuse-fips, librechat...