Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2255-3477-vp73

Опубликовано: 10 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.2

Описание

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.

EPSS

Процентиль: 22%
0.00299
Низкий

9.2 Critical

CVSS4

Дефекты

CWE-20

Связанные уязвимости

nvd
2 дня назад

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.

debian
2 дня назад

A vulnerability in the Gemini CLI and associated GitHub Action allowed ...

EPSS

Процентиль: 22%
0.00299
Низкий

9.2 Critical

CVSS4

Дефекты

CWE-20