Google Gemini Live API Flaw Enables Remote Code Execution via Token Misconfiguration

A significant security flaw in Google’s Gemini Live API has been identified, allowing attackers to exploit misconfigured ephemeral tokens for remote code execution (RCE). This vulnerability enables unauthorized code execution within browser-based AI voice sessions, impacting applications that utilize the Gemini Live API. Security researcher Alvin Ferdiansyah highlighted that the issue arises from improper implementation of the 'Constrained' WebSocket endpoint by developers. The flaw can lead to the injection of client-controlled setup frames, posing a risk to numerous applications relying on this API. As of now, no specific CVE has been assigned, and developers are urged to review their implementations to mitigate potential exploitation.

Key Points: • The flaw in Google’s Gemini Live API allows for remote code execution via misconfigured tokens. • Attackers can inject arbitrary code into AI voice sessions, affecting multiple applications. • Developers are advised to review their use of the 'Constrained' WebSocket endpoint to prevent exploitation.