Google Cloud run-gemini-cli GitHub Action vulnerabilities (CVE)

CVE records published for Google Cloud run-gemini-cli GitHub Action, newest first. Follow to get an email when a new one appears.

1 results

10.0Critical

CVE-2026-12537 4 months ago

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

Google Cloud Gemini CLI; Google Cloud run-gemini-cli GitHub Action

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox…