Threats affecting pkg:github/google-github-actions/run-gemini-cli

CVE-2026-12537 is a critical vulnerability in Google Cloud Gemini CLI and the run-gemini-cli GitHub Action that allows an unprivileged attacker to execute code on the host system. This occurs due to improper input validation leading to OS command injection via a maliciously crafted .gemini/.env file on headless CI platforms. The vulnerability affects Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.22. A patch is available to address this issue.