Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wpqr-6v78-jr5g. This link is maintained to preserve external references. ### Original Description Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.
GHSA-jj69-4grx-fqj5
Primary source · Revision 1 · Withdrawn
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:GHSA-jj69-4grx-fqj5
google-github-actions/run-gemini-cli
Source reference: /affected/0/package/name
- Affected versions
- v0.1.21
Source reference:
/affected/0/versionsv0.1.20Source reference:
/affected/0/versionsv0.1.19Source reference:
/affected/0/versionsv0.1.18Source reference:
/affected/0/versionsv0.1.17Source reference:
/affected/0/versionsv0.1.16Source reference:
/affected/0/versionsv0.1.15Source reference:
/affected/0/versionsv0.1.14Source reference:
/affected/0/versionsv0.1.13Source reference:
/affected/0/versionsv0.1.12Source reference:
/affected/0/versionsv0.1.11Source reference:
/affected/0/versionsv0.1.10Source reference:
/affected/0/versionsv0.1.9Source reference:
/affected/0/versionsv0.1.8Source reference:
/affected/0/versionsv0.1.7Source reference:
/affected/0/versionsv0.1.6Source reference:
/affected/0/versionsv0.1.5Source reference:
/affected/0/versionsv0.1.4Source reference:
/affected/0/versionsv0.1.3Source reference:
/affected/0/versionsv0.1.2Source reference:
/affected/0/versionsv0.1.1Source reference:
/affected/0/versions - Fixed versions
- 0.1.22
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.22"
}
]
},
{
"repo": "https://github.com/google-github-actions/run-gemini-cli",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "f77273f4c914e4bf38440cf36a0369cb64a37489"
}
]
}
],
"package": {
"name": "google-github-actions/run-gemini-cli",
"ecosystem": "GitHub Actions"
},
"versions": [
"v0.1.21",
"v0.1.20",
"v0.1.19",
"v0.1.18",
"v0.1.17",
"v0.1.16",
"v0.1.15",
"v0.1.14",
"v0.1.13",
"v0.1.12",
"v0.1.11",
"v0.1.10",
"v0.1.9",
"v0.1.8",
"v0.1.7",
"v0.1.6",
"v0.1.5",
"v0.1.4",
"v0.1.3",
"v0.1.2",
"v0.1.1"
],
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-jj69-4grx-fqj5/GHSA-jj69-4grx-fqj5.json"
}
}
]Publisher severity
critical
Source reference: /database_specific/severity
- Event
- #14235 · Revision 1
- Added to Heist Feed
- Publisher date