ZeroDay Findings
Sign inSign up

Findings

GHSA-jj69-4grx-fqj5

Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

Published Jun 24, 2026 · updated Sep 24, 2026

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wpqr-6v78-jr5g. This link is maintained to preserve external references. ### Original Description Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 24, 2026 · GitHub Advisory Database

    Detected

    ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wpqr-6v78-jr5g. This link is maintained to preserve external references. ### Original Description Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows

  2. Sep 24, 2026 · GitHub Advisory Database

    Withdrawn

    The advisory was withdrawn.

  3. Sep 24, 2026 · GitHub Advisory Database

    Fix available

    google-github-actions/run-gemini-cli fixed in 0.1.22

  4. Sep 24, 2026 · GitHub Advisory Database

    Updated

    ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wpqr-6v78-jr5g. This link is maintained to preserve external references. ### Original Description Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows

Affected

  • GitHub Actions google-github-actions/run-gemini-cli0 → 0.1.22

Sources

  • GitHub Advisory DatabasePackage advisoryGHSA-jj69-4grx-fqj5

    GitHub Advisory Database record mirrored by OSV.

    github.com
  • OSV.devPackage advisoryGHSA-jj69-4grx-fqj5

    Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

    osv.dev

References