CVE-2026-12537

High7.8Published on June 24, 2026

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-20, CWE-78

Vendorsgoogle

Affected products

Vendors	Product	Versions
google	gemini-cli	< 0.39.1
google	run-gemini-cli	< 0.1.22

Vulnerabilities

Unprivileged GitHub Issue Can Compromise Claude Code and Gemini CLI CI Runners

Security flaw allows unprivileged GitHub users to exploit CI runners in Claude Code and Gemini CLI. Patches available for CVE-2026-12537 and CVE-2026-54316.

Aug 9, 202617:083 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Unprivileged GitHub Issue Can Compromise Claude Code and Gemini CLI CI Runners