Threats affecting pkg:brew/gemini-cli

Gemini CLI versions prior to 0.40.1 have vulnerabilities related to workspace trust and tool allowlisting in headless (CI) environments. Previously, Gemini CLI automatically trusted workspace folders in headless mode, which could allow remote code execution if untrusted folders contained malicious environment variables. Additionally, in --yolo mode, tool allowlisting was bypassed, potentially enabling arbitrary command execution. These issues are addressed in version 0.40.1, which requires explicit folder trust and enforces tool allowlisting even in --yolo mode. Users running Gemini CLI in CI workflows, especially on untrusted inputs, must update to patched versions and adjust trust settings accordingly.