Google Gemini CLI — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Gemini CLI Vulnerability Allows Arbitrary Code Execution

  A critical vulnerability in Google’s Gemini CLI, tracked as CVE-2026-12537, has been disclosed, enabling attackers to execute arbitrary code in CI/CD environments, particularly within GitHub Actions workflows. This flaw…

  2 articles · Updated June 29, 2026
• Critical RCE Vulnerability in Google Gemini CLI Exposes CI/CD Pipelines

  Google has issued urgent security updates for its Gemini CLI and GitHub Action to address a critical vulnerability, identified as GHSA-wpqr-6v78-jr5g. This flaw allows for Remote Code Execution (RCE) attacks due to…

  14 articles · Updated April 27, 2026
• Notepad++ v8.9.7 Update Addresses Critical Vulnerabilities Including Command Injection

  Notepad++ released version 8.9.7 on July 14, 2026, fixing five security vulnerabilities. Among these is a critical PowerShell command injection flaw that could allow arbitrary code execution during installation. The…

  5 articles · Updated July 15, 2026

Recent Intelligence Reports

• Notepad++ v8.9.7 Security Update Fixes 5 Vulnerabilities, Including Stack Buffer ... — Gbhackers · July 15, 2026
• Critical Google Gemini CLI Flaw Lets Attackers Execute Code on Headless CI Platforms — Gbhackers · June 29, 2026
• GHSA-WPQR-6V78-JR5G: Remote Code Execution in Google Gemini CLI via ... — Hashnode · April 25, 2026

Related Entities