Riskcovery

CVE-2026-13745

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

State
Published
Severity
7.7 High
Published
Sep 10, 2026
Updated
Sep 23, 2026
Reserved
Jun 29, 2026

Read the record on cve.org

Description

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

Scores

CVSSScoreVectorSource
4.07.7 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:AmberGoogleCloud

Weaknesses

  • CWE-829 Inclusion of functionality from untrusted control sphere
  • CWE-15 External Control of System or Configuration Setting

Affected Products

ProductVersions
Gemini CLIGoogle Cloud
  • before 0.39.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.