CVE-2026-13745

UNKNOWN 0.0

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

CVSS Score

0.0

EPSS Score

0.3%

EPSS Percentile

23th

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

CWE	CWE-829 CWE-15
Vendor	google cloud
Product	gemini cli
Published	Sep 10, 2026
Last Updated	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for google cloud gemini cli

Be the first to know when new unknown vulnerabilities affecting google cloud gemini cli are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Google Cloud / Gemini CLI

0 < 0.39.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/google-gemini/gemini-cli/releases/tag/v0.39.1 redguard.ch: https://www.redguard.ch/blog/2026/06/03/advisory-google-gemini-cli/ pwned.info: https://www.pwned.info/articles/homing-in-on-arbitrary-code-execution-within-gemini-cli/

Credits

Benjamin Faller, Redguard AG