Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2026-12537

Gemini CLI

7.8
Severity
High
Published
June 24, 2026
Last modified
July 2, 2026

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness

References

CVE-2026-12537 on NVD

Listed in

HighCommand injection

More Gemini CLI CVEs

Sep 10
CVE-2026-137457.7

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory.