critical10.0
CVE-2026-12537
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versi…
Impact
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @google/gemini-cli | < 0.39.1 | 0.39.1 |
| actions | google-github-actions/run-gemini-cli | < 0.1.22 | 0.1.22 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gemini-Cli | before 0.39.1 Version 0.40.0 | |
| Run-Gemini-Cli | before 0.1.22 |