Description
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Google Cloud | Gemini CLI | < 0.39.1 | 0.39.1 |
| Google Cloud | run-gemini-cli GitHub Action | < 0.1.22 | 0.1.22 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| GitHub Actions | google-github-actions/run-gemini-cli | < 0.1.22 | 0.1.22 | GHSA-wpqr-6v78-jr5g |
| npm | @google/gemini-cli | < 0.39.1 | 0.39.1 | GHSA-wpqr-6v78-jr5g |
| npm | @google/gemini-cli | >= 0.40.0-preview.2, < 0.40.0-preview.3 | 0.40.0-preview.3 | GHSA-wpqr-6v78-jr5g |