CVE-2026-12537

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

State: Published
Severity: 10.0 Critical
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 17, 2026

Description

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

Scores

CVSS	Score	Vector	Source
4.0	10.0 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear	GoogleCloud

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Gemini CLIGoogle Cloud	before 0.39.1Affected
run-gemini-cli GitHub ActionGoogle Cloud	before 0.1.22Affected

References

https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.