CVE-2026-12537

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 29, 2026

Last Seen

June 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Gemini CLI Vulnerability Allows Arbitrary Code Execution72.8

A critical vulnerability in Google’s Gemini CLI, tracked as CVE-2026-12537, has been disclosed, enabling attackers to execute arbitrary code in CI/CD environments, particularly within GitHub Actions workflows. This flaw affects versions of @google/gemini-cli prior to 0.39.1 and 0.40.0-preview.3, as...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Gemini CLI Vulnerability Allows Arbitrary Code Execution

Jun 29·2 sources

Related Entities

Google Google Gemini CLI Google-github-actions/run-gemini-cli Gemini CLI GitHub Actions

CVE-2026-12537

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Gemini CLI Vulnerability Allows Arbitrary Code Execution

Related Articles (2)

Critical Gemini CLI Vulnerability Lets Attackers Execute Arbitrary Code

Critical Google Gemini CLI Flaw Lets Attackers Execute Code on Headless CI Platforms

Related Entities