Google: >> Run-Gemini-Cli >> 0.1.1 Security Vulnerabilities
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
CVSS Score
10.0
EPSS Score
0.001
Published
2026-06-24