Google has fixed a critical, maximum-severity security vulnerability affecting the Gemini CLI and a related GitHub Actions workflow. The issue is reported as a CVSS 10.0 remote code execution (RCE) flaw that could allow an unprivileged external attacker to execute arbitrary commands on affected host systems. According to the reports, the vulnerability could be triggered by forcing malicious content to load as a Gemini configuration, which in turn could lead to command execution.
The flaw impacts the “@google/gemini-cli” npm package and the “google-github-actions/run-gemini-cli” GitHub Actions workflow. Google has issued a patch, and sources note that fixes may be applied automatically for some environments, depending on how the CI/CD dependencies and workflow are managed. Google also warns users running Gemini CLI in headless mode, including through CI workflows, to review their GitHub Actions configurations and ensure they are updated to the patched components.
Overall, both outlets describe the same core problem—unauthorized command execution via configuration loading—and the same remediation focus: update the affected npm package and workflow usage.
