{"data":{"id":"4db4a187-706f-46fc-9dfa-b6b0e0b2a6cc","title":"CVE-2026-12537: Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1)…","summary":"CVE-2026-12537 affects Google Gemini CLI (versions prior to 0.39.1) and the run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms. An unprivileged attacker can use a maliciously crafted .gemini/.env file to achieve pre-sandbox host-level code execution, via an OS command injection flaw in the container launcher. NVD has not yet provided an assessment; the CNA GoogleCloud rates it CVSS 4.0 10.0 CRITICAL.","solution":"Fixed in Gemini CLI 0.39.1 and run-gemini-cli 0.1.22, the versions after which the flaw is no longer present. The source text does not describe further workarounds; the advisory is referenced at https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12537","publishedAt":"2026-06-24T14:17:29.630Z","cveId":"CVE-2026-12537","cweIds":["CWE-20"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@google/gemini-cli@< 0.39.1 (fixed: 0.39.1)","@google/gemini-cli@= 0.40.0-preview.2 (fixed: 0.40.0-preview.3)","google-github-actions/run-gemini-cli@< 0.1.22 (fixed: 0.1.22)"],"affectedPackageNames":["@google/gemini-cli","google-github-actions/run-gemini-cli"],"affectedPackageRefs":["npm:@google/gemini-cli","actions:google-github-actions/run-gemini-cli"],"affectedVendors":["Google"],"affectedVendorsRaw":["Google Gemini CLI","run-gemini-cli GitHub Action"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Google Gemini CLI OS command injection via crafted .gemini/.env file","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00212,"epssCheckedAt":"2026-11-09T12:10:45.644Z","kevDateAdded":null,"advisoryAliases":["GHSA-wpqr-6v78-jr5g"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:29.613Z","patchAvailable":true,"disclosureDate":"2026-06-24T14:17:29.630Z","fixReleasedAt":"2026-04-24T02:04:16.350Z","daysToFix":-61,"fixCheckedAt":"2026-10-29T21:33:51.054Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"google-github-actions/run-gemini-cli","fixedVersion":"0.1.22","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:33:50.906Z"},{"ecosystem":"npm","name":"@google/gemini-cli","fixedVersion":"0.40.0-preview.3","matchedVersion":"0.40.0-preview.3","fixReleasedAt":"2026-04-24T02:04:16.350Z","daysToFix":-61,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:33:50.906Z"},{"ecosystem":"npm","name":"@google/gemini-cli","fixedVersion":"0.39.1","matchedVersion":"0.39.1","fixReleasedAt":"2026-04-24T02:05:15.022Z","daysToFix":-61,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:33:50.906Z"}]}}