Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-12537— Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

Quick assessment

Affected
Google Cloud Gemini CLI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google Google Gemini CLI是美国Google公司开源的一款由 Google 开发的 AI 终端工具，支持在命令行中查询和编辑大型代码库、从图片或 PDF 生成应用，以及自动化复杂工作流。 Google Gemini CLI 0.39.1之前版本和run-gemini-cli GitHub Action 0.1.22之前版本存在输入验证错误漏洞，该漏洞源于容器启动器中OS命令中和不当，可能导致未授权的攻击者通过特制的.gemini/.env文件实现在沙箱前的主机级代码执行。

AI Predicted 8.1 Difficulty: Easy EPSS 0.15% · P5

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 2

VendorProduct Version RangeStatus
Google Cloud Gemini CLI < 0.39.1 affected
Google Cloud run-gemini-cli GitHub Action < 0.1.22 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-12537

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Google Gemini CLI 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google Google Gemini CLI是美国Google公司开源的一款由 Google 开发的 AI 终端工具，支持在命令行中查询和编辑大型代码库、从图片或 PDF 生成应用，以及自动化复杂工作流。 Google Gemini CLI 0.39.1之前版本和run-gemini-cli GitHub Action 0.1.22之前版本存在输入验证错误漏洞，该漏洞源于容器启动器中OS命令中和不当，可能导致未授权的攻击者通过特制的.gemini/.env文件实现在沙箱前的主机级代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Google Cloud Gemini CLI 0 ~ 0.39.1 -
Google Cloud run-gemini-cli GitHub Action 0 ~ 0.1.22 -

II. Public POCs for CVE-2026-12537

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-12537

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-12537 (1)

IV. Related Vulnerabilities

Same vendor: Google Cloud
Same weakness: CWE-20

V. Comments for CVE-2026-12537

No comments yet

Leave a comment