Back Hashnode

GHSA-WPQR-6V78-JR5G: Remote Code Execution in Google Gemini CLI via ...

Hashnode • April 25, 2026

GHSA-WPQR-6V78-JR5G: Remote Code Execution in Google Gemini CLI via Workspace Settings Bypass Vulnerability ID: GHSA-WPQR-6V78-JR5G CVSS Score: 9.8 Published: 2026-04-24 The Google Gemini CLI (prior to v0.17.2) is vulnerable to unauthenticated remo...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Google Gemini CLI Exposes CI/CD Pipelines Google has issued urgent security updates for its Gemini CLI and GitHub Action to address a critical vulnerability, identified as GHSA-wpqr-6v78-jr5g. This flaw allows for Remote Code Execution (RCE) attacks due to improper handling of workspace trust and tool allowlisting. The vulnerability affects CI/CD pipelines, potentially compromising automated workflows. The CVSS score for this vulnerability is 9.8, indicating a high level of severity. Users of Gemini CLI prior to version 0.17.2 are particularly at risk. Google has recommended immediate updates to mitigate the risk. The vulnerability was publicly disclosed on April 24, 2026. Security professionals are advised to review their configurations and apply the necessary patches. 14 sources 73

Extracted Entities

GHSA-WPQR-6V78-JR5G: Remote Code Execution in Google Gemini CLI via ...

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)