en
Gemini CLI, created by Google Cloud, is an open-source command-line tool that enables interaction with Google Gemini AI models from a local terminal or Cloud Shell. It supports multiple installation methods, runs as a client-side application with a local server component, and targets developers, site reliability engineers, and cloud administrators who automate workflows and experiments with Gemini in Google Cloud projects.
As of 09/19/2026, within CyStack's analyzed data, Gemini CLI has 2 security vulnerabilities published in the last 90 days. Of these, 2 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Gemini CLI and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 2 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-13745Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables | Exploitation statusNot known exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-12537Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows | Exploitation statusNot known exploited | FixYes | Published06/24/2026 | SeverityCritical |
