CVE-2026-13745: CWE-20 Improper input validation in Google Cloud Gemini CLI
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.
AI Analysis
Technical Summary
This vulnerability arises from improper input validation (CWE-20) and command injection risks (CWE-78) in the Gemini CLI and its GitHub Action. An attacker with no privileges can exploit untrusted local .env files to override the GEMINI_CLI_HOME environment variable, leading to arbitrary code execution within the Gemini CLI environment. The vulnerability has a CVSS 4.0 base score of 9.2, indicating critical severity. The affected product is a cloud service managed by Google Cloud.
Potential Impact
Successful exploitation allows an unprivileged attacker to execute arbitrary code in the context of the Gemini CLI, potentially compromising the environment and any operations performed through the CLI. This could lead to unauthorized actions within the cloud service environment.
Mitigation Recommendations
As this is a cloud-hosted service, Google Cloud manages remediation server-side. A patch is available, and users should verify with the official Google Cloud advisory for the current remediation status and ensure their environments are updated accordingly. No additional user action is specified beyond applying the official fix.
CVE-2026-13745: CWE-20 Improper input validation in Google Cloud Gemini CLI
Description
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.
CVSS v4.0
Score 9.2critical
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability arises from improper input validation (CWE-20) and command injection risks (CWE-78) in the Gemini CLI and its GitHub Action. An attacker with no privileges can exploit untrusted local .env files to override the GEMINI_CLI_HOME environment variable, leading to arbitrary code execution within the Gemini CLI environment. The vulnerability has a CVSS 4.0 base score of 9.2, indicating critical severity. The affected product is a cloud service managed by Google Cloud.
Potential Impact
Successful exploitation allows an unprivileged attacker to execute arbitrary code in the context of the Gemini CLI, potentially compromising the environment and any operations performed through the CLI. This could lead to unauthorized actions within the cloud service environment.
Mitigation Recommendations
As this is a cloud-hosted service, Google Cloud manages remediation server-side. A patch is available, and users should verify with the official Google Cloud advisory for the current remediation status and ensure their environments are updated accordingly. No additional user action is specified beyond applying the official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GoogleCloud
- Date Reserved
- 2026-06-29T15:39:28.269Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6aa26fdaacd9273b49d011b0
Added to database: 09/10/2026, 08:52:42 UTC
Last enriched: 09/10/2026, 09:07:08 UTC
Last updated: 09/10/2026, 11:04:32 UTC
Views: 42
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.