CVE-2026-12537: Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows
Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Gemini CLI (gemini)to a version that resolves this vulnerability.Fixed in 0.39.1 - Upgrade
Upgrade
run-gemini-cli GitHub Actionto a version that resolves this vulnerability.Fixed in 0.1.22
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12537?
CVE-2026-12537 has a severity rating of 91, indicating a high risk of exploitation.
How do I fix CVE-2026-12537?
To remediate CVE-2026-12537, update Google Gemini CLI to version 0.39.1 or later and the run-gemini-cli GitHub Action to version 0.1.22 or later.
What systems are affected by CVE-2026-12537?
CVE-2026-12537 affects Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.22.
What type of vulnerability is CVE-2026-12537?
CVE-2026-12537 is categorized as an Unauthenticated Remote Code Execution vulnerability caused by improper neutralization of OS command input.
What can an attacker do with CVE-2026-12537?
An attacker exploiting CVE-2026-12537 can achieve pre-sandbox host-level code execution on vulnerable CI/CD systems.