Description
A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Google Cloud | Gemini CLI | < 0.39.1 | 0.39.1 |