Vulnerability Bulletins |
CVE-2026-13745 |
|
| Affected software | GITHUB |
| A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-13745 | |