google-gemini/gemini-cli

google-gemini/gemini-cli

GitHubGitHub
GitHubgithub.com
geminicli.comgeminicli.com
Releases574
Frequency16 hours 37 minutes
Last Release
Stars106K
An open-source AI agent that brings the power of Gemini directly into your terminal.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-12537NVD↗
< 0.39.1, = 0.40.07.8 HIGH—

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.