https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:13:57.688813+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-gemini-cli-cve-2026-12537 BREW-gemini-cli-CVE-2026-12537 — Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses 2026-10-05T05:13:57.766147+00:00

Affected: Homebrew: gemini-cli

# Summary

Gemini CLI (`@google/gemini-cli`) and the `run-gemini-cli` GitHub Action are being updated to harden workspace trust and tool allowlisting, in particular when used in untrusted environments like GitHub Actions. This update introduces a breaking change to how non-interactive (headless) environments handle folder trust, which may impact existing CI/CD workflows under specific conditions.

# Details

Folder Trust in Headless Mode

In previous versions, Gemini CLI running in CI environments (headless mode) automatically trusted workspace folders for the purpose of loading configuration and environment variables. This is potentially risky in situations where Gemini CLI runs on untrusted folders in headless mode (e.g. CI workflows that review user-submitted pull requests). If used with untrusted directory contents, this could lead to remote code execution via malicious environment variables in the local `.gemini/` directory.

To ensure consistency and user control, the latest update aligns headless mode behavior with interactive mode, requiring folders to be explicitly trusted before configuration files (such as `.env`) are processed.

As a result of this change, GitHub Actions and other automated pipelines that rely on the previous automatic trust behavior will fail to load workspace-specific settings until they are updated to use explicit trust mechanisms.

Tool Allowlisting under \--yolo

In previous versions, when Gemini CLI was configured to run in `--yolo` mode, i…

 https://cve.radiocsirt.org/vuln/euvd-2026-373965 EUVD-2026-373965 2026-10-05T05:13:57.766239+00:00 EUVD-2026-373965 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13745 fkie_cve-2026-13745 2026-10-05T05:13:57.766257+00:00

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

 https://cve.radiocsirt.org/vuln/ghsa-2255-3477-vp73 GHSA-2255-3477-vp73 2026-10-05T05:13:57.766283+00:00

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.