Back
Tool
Gemini CLI
Related CVEs
Recent activity
Critical RCE Vulnerability in Google Gemini CLI Exposes CI/CD PipelinesGoogle has issued urgent security updates for its Gemini CLI and GitHub Action to address a critical vulnerability, identified as GHSA-wpqr-6v78-jr5g. This flaw allows for Remote C…Critical Gemini CLI Vulnerability Allows Arbitrary Code ExecutionA critical vulnerability in Google’s Gemini CLI, tracked as CVE-2026-12537, has been disclosed, enabling attackers to execute arbitrary code in CI/CD environments, particularly wit…Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding AgentsPlugin4Shell is a critical zero-click remote code execution vulnerability affecting four major AI coding agents: Claude Code, Codex, GitHub Copilot, and Gemini CLI. Discovered by A…AI-Driven Botnet Migration by Russian Actor in Just Six MinutesA Russian-speaking threat actor known as 'bandcampro' utilized AI to migrate a command-and-control (C&C) botnet in just six minutes, performing only 11% of the work manually. The o…InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install PagesThe InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tac…Vulnerabilities in AI Coding Tools Expose GitHub Secrets to AttackersAI coding tools from Anthropic, Google, and OpenAI were found vulnerable to malicious GitHub issues. Researchers at Novee Security identified flaws in Claude Code, Gemini CLI, and …GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code ExtensionOn May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attri…Exploitation of GitHub Actions via pull_request_target TriggerA targeted campaign exploiting GitHub Actions' pull_request_target trigger was identified, allowing attackers to execute malicious code with elevated privileges. This vulnerability…Sandbox Escapes Discovered in Major AI Coding ToolsPillar Security has identified vulnerabilities in four AI coding agents—Cursor, Codex, Gemini CLI, and Antigravity—that allow for sandbox escapes without direct attacks on the sand…