CVE-2026-12537 — Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

CVE-2026-12537

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows PUBLISHED

Description (CNA)

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

Affected (CNA)

Vendor / product	Versions
Google Cloud / Gemini CLI	affected 0 before 0.39.1
Google Cloud / run-gemini-cli GitHub Action	affected 0 before 0.1.22

CWE

CWE-20

References

https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.