19d ago

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More info: https:// radar.offseq.com/threat/cve-20 26-13745-cwe-20-improper-input-validation-in-google-cloud-gemini-cli-2874a8a8cddc669d # OffSeq # GoogleCloud # Vulnerability # InfoSec

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More

mastodon:infosec-exchangeother19d ago kagi ↗

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More info: https:// radar.offseq.com/threat/cve-20 26-13745-cwe-20-improper-input-validation-in-google-cloud-gemini-cli-2874a8a8cddc669d # OffSeq # GoogleCloud # Vulnerability # InfoSec