CVE-2026-13745 - Vulnerability Details - OpenCVE

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.

Attack Vector Network

Attack Complexity High

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/google-github-actions/run-gemini-cli/releases/tag/v0.1.22
https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g

History

Thu, 10 Sep 2026 08:45:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.
Title		Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables
Weaknesses		CWE-20 CWE-78
References		https://github.com/google-github-actions/run-gemini-cli/releases/tag/v0.1.22 https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g
Metrics		cvssV4_0 `{'score': 9.2, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber'}`

MITRE

Status: PUBLISHED

Assigner: GoogleCloud

Published: 2026-09-10T08:33:09.309Z

Updated: 2026-09-10T08:33:09.309Z

Reserved: 2026-06-29T15:39:28.269Z

Link: CVE-2026-13745

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-10T09:17:00.703

Modified: 2026-09-10T09:17:00.703

Link: CVE-2026-13745

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13745", "assignerOrgId": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "state": "PUBLISHED", "assignerShortName": "GoogleCloud", "dateReserved": "2026-06-29T15:39:28.269Z", "datePublished": "2026-09-10T08:33:09.309Z", "dateUpdated": "2026-09-10T08:33:09.309Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "shortName": "GoogleCloud", "dateUpdated": "2026-09-10T08:33:09.309Z"}, "title": "Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper input validation", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 Command Injection"}]}], "affected": [{"vendor": "Google Cloud", "product": "Gemini CLI", "versions": [{"status": "affected", "version": "0", "lessThan": "0.39.1", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Google Cloud", "product": "run-gemini-cli GitHub Action", "versions": [{"status": "affected", "version": "0", "lessThan": "0.1.22", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker\u00a0to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker <span>to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.</span>"}]}], "references": [{"url": "https://github.com/google-github-actions/run-gemini-cli/releases/tag/v0.1.22"}, {"url": "https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.2, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber"}}], "solutions": [{"lang": "en", "value": "* Upgrade: Ensure you are using the latest version of gemini cli and follow the best practices guide https://github.com/google-github-actions/run-gemini-cli/blob/main/docs/trust-guidance.md\n * Configure Trust: Determine if your CI workflow operates on trusted or untrusted data. If the data is fully trusted, set\u00a0GEMINI_TRUST_WORKSPACE: 'true'\u00a0in your workflow.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><ol><li><strong>Upgrade</strong>: Ensure you are using the latest version of gemini cli and follow the best practices guide https://github.com/google-github-actions/run-gemini-cli/blob/main/docs/trust-guidance.md</li><li><strong>Configure Trust</strong>: Determine if your CI workflow operates on trusted or untrusted data. If the data is fully trusted, set <code>GEMINI_TRUST_WORKSPACE: 'true'</code> in your workflow.</li></ol></div>"}]}], "credits": [{"lang": "en", "value": "Benjamin Faller, Redguard AG", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Gemini CLI", "vendor": "Google Cloud", "versions": [{"lessThan": "0.39.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "run-gemini-cli GitHub Action", "vendor": "Google Cloud", "versions": [{"lessThan": "0.1.22", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker\u00a0to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME."}], "id": "CVE-2026-13745", "lastModified": "2026-09-10T09:17:00.703", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "type": "Secondary"}]}, "published": "2026-09-10T09:17:00.703", "references": [{"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "url": "https://github.com/google-github-actions/run-gemini-cli/releases/tag/v0.1.22"}, {"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "url": "https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g"}], "sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-78"}], "source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c", "type": "Secondary"}]}