CVE-2026-12537CWE-20

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

Critical · published June 24, 2026

CVSS v4.0
10.0
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-06-24T13:37Z
EPSS history
Timeline
  • 24 JUN 13:37Z
    Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows
    cvelistv5