cbcvebase.

Google Cloud Gemini Cli vulnerabilities

1 known vulnerability affecting google_cloud/gemini_cli.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-12537P2CRITICALCVSS 10.0fixed in 0.39.12026-06-24
CVE-2026-12537 [CRITICAL] CWE-20 CVE-2026-12537: Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versio Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
nvd
Google Cloud Gemini Cli vulnerabilities | cvebase