{"id":"CVE-2026-13745","title":"A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory","summary":"A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env fi…","severity":"high","cvss":7.7,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Amber","cwe":["CWE-15","CWE-829","CWE-20","CWE-78"],"vendor":"Google Cloud","product":"Gemini CLI","affected":["gemini_cli < 0.39.1"],"published":"2026-09-10","updated":"2026-09-23","sourceUpdated":"2026-09-23T10:17:06.027","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13745","references":[{"url":"https://github.com/google-gemini/gemini-cli/releases/tag/v0.39.1","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"},{"url":"https://www.pwned.info/articles/homing-in-on-arbitrary-code-execution-within-gemini-cli/","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"},{"url":"https://www.redguard.ch/blog/2026/06/03/advisory-google-gemini-cli/","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"},{"url":"https://github.com/google-github-actions/run-gemini-cli/releases/tag/v0.1.22","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"},{"url":"https://github.com/google-github-actions/run-gemini-cli/security/advisories/GHSA-wpqr-6v78-jr5g","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-10T15:03:19.734151Z"},"cvssSource":"cna","epss":0.00652,"epssPercentile":0.51021,"ingestedAt":"2026-09-10T09:45:12.028Z","slug":"CVE-2026-13745","body":"## Overview\n\nA vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":209542,"id":"CVE-2026-13745","ts":1790158947535,"field":"cvss","old":"9.2","new":"7.7"},{"seq":209541,"id":"CVE-2026-13745","ts":1790158947535,"field":"severity","old":"critical","new":"high"}]}