CVE-2026-54785

MEDIUM 6.2

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

CVSS Score

6.2

EPSS Score

0.0%

EPSS Percentile

0th

gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1.

CWE	CWE-22 CWE-200
Vendor	elyin
Product	gemini-bridge
Published	Jul 31, 2026

Stay Ahead of the Next One

Get instant alerts for elyin gemini-bridge

Be the first to know when new medium vulnerabilities affecting elyin gemini-bridge are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

eLyiN / gemini-bridge

>= 1.0.0, < 1.3.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp github.com: https://github.com/eLyiN/gemini-bridge/pull/9 github.com: https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801 github.com: https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1