CVE-2026-13745CWE-15CWE-829command-injection

CVE-2026-13745

published September 10, 2026

CVSS
9.2
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber
EPSS
0.00375 · 30.3th percentile
Weaknesses
CWE-15 · External Control of System or Configuration Setting; CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2026-09-10T13:17Z
References (3)
https://github.com/google-gemini/gemini-cli/releases/tag/v0.39.1 · f45cbf4e-4146-4068-b7e1-655ffc2c548chttps://www.pwned.info/articles/homing-in-on-arbitrary-code-execution-within-gemini-cli/ · f45cbf4e-4146-4068-b7e1-655ffc2c548chttps://www.redguard.ch/blog/2026/06/03/advisory-google-gemini-cli/ · f45cbf4e-4146-4068-b7e1-655ffc2c548c
EPSS history
Timeline
  • 11 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 10 SEP 08:33Z
    Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables
    cvelistv5