Skip to content
OpenAdvisories

Vendor

eLyiN

1 known vulnerabilities.

Products

gemini-bridge 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2026-54785

    gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

    gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working dir…

    eLyiN gemini-bridge gemini-bridge PyPI