{"id":"CVE-2026-12537","details":"Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.","aliases":["CVE-2026-13745","GHSA-wpqr-6v78-jr5g"],"modified":"2026-09-12T03:55:49.995433997Z","published":"2026-06-24T14:17:29.630Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"0.39.1"}],"source":"CPE_RANGE","vendor_product":"google:gemini-cli","cpes":["cpe:2.3:a:google:gemini-cli:*:*:*:*:*:node.js:*:*"]},{"vendor_product":"google:gemini-cli","cpes":["cpe:2.3:a:google:gemini-cli:0.40.0:preview2:*:*:*:node.js:*:*"],"extracted_events":[{"introduced":"0.40.0-preview2"},{"last_affected":"0.40.0-preview2"}],"source":"CPE_STRING"}]},"references":[{"type":"FIX","url":"https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/google-github-actions/run-gemini-cli","events":[{"introduced":"0"},{"fixed":"f77273f4c914e4bf38440cf36a0369cb64a37489"}],"database_specific":{"cpe":"cpe:2.3:a:google:run-gemini-cli:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.1.22"}],"source":"CPE_RANGE"}}],"versions":["v0.1.21","v0.1.20","v0.1.19","v0.1.18","v0.1.17","v0.1.16","v0.1.15","v0.1.14","v0.1.13","v0.1.12","v0.1.11","v0.1.10","v0.1.9","v0.1.8","v0.1.7","v0.1.6","v0.1.5","v0.1.4","v0.1.3","v0.1.2","v0.1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-12537.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}