{"id":"CVE-2026-12537","title":"Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker …","summary":"Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-20","CWE-78","CWE-77","CWE-200"],"vendor":"google","product":"gemini-cli","affected":["gemini-cli < 0.39.1","gemini-cli = 0.40.0","run-gemini-cli < 0.1.22"],"patched":["gemini-cli 0.39.1","run-gemini-cli 0.1.22"],"published":"2026-06-24","updated":"2026-07-02","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12537","references":[{"url":"https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12537"},{"url":"https://github.com/advisories/GHSA-wpqr-6v78-jr5g"}],"tags":["nvd","ghsa","npm","score-dispute"],"epss":0.00212,"epssPercentile":0.10169,"ingestedAt":"2026-07-03T13:02:27.981Z","aliases":["GHSA-wpqr-6v78-jr5g"],"ecosystem":"npm","scores":{"nvd":7.8,"ghsa":10},"slug":"CVE-2026-12537","body":"## Overview\n\nImproper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.\n\n## Affected\n\n- `gemini-cli < 0.39.1`\n- `gemini-cli = 0.40.0`\n- `run-gemini-cli < 0.1.22`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `gemini-cli 0.39.1`\n- `run-gemini-cli 0.1.22`\n\n## Package advisory (CVE-2026-12537)\n\nAffected packages:\n\n- `@google/gemini-cli < 0.39.1`\n- `@google/gemini-cli = 0.40.0-preview.2`\n- `google-github-actions/run-gemini-cli < 0.1.22`\n\nPatched in:\n\n- `@google/gemini-cli 0.39.1`\n- `@google/gemini-cli 0.40.0-preview.3`\n- `google-github-actions/run-gemini-cli 0.1.22`\n\nSource: https://github.com/advisories/GHSA-wpqr-6v78-jr5g","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}