---
id: CVE-2026-117560
title: ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools
summary: >-
  ATXP Gemini CLI extension through 1.0.0 contains an OS command injection
  vulnerability in runAtxp() that allows attackers to execute shell commands
  through unsanitized MCP tool parameters. Attackers can plant instructions in
  email or SMS…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-78
vendor: atxp
product: gemini-cli-extension
affected:
  - gemini-cli-extension <= 1.0.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-28T14:58:01.954396Z'
published: '2026-10-27'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T16:17:06.328Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-117560'
references:
  - url: 'https://github.com/atxp-dev/atxp/issues/15'
    label: 'GitHub Issue #15'
  - url: 'https://github.com/atxp-dev/atxp'
  - url: >-
      https://github.com/atxp-dev/atxp/blob/4e88b0282b51ae7c22ea1b6ca4476a39298299ff/src/server.ts#L28-L40
  - url: >-
      https://www.vulncheck.com/advisories/atxp-gemini-cli-extension-through-1.0.0-os-command-injection-via-mcp-tools
    label: >-
      VulnCheck Advisory: ATXP Gemini CLI Extension through 1.0.0 OS Command
      Injection via MCP Tools
tags:
  - cve.org
epss: 0.00652
epssPercentile: 0.51119
ingestedAt: '2026-10-27T16:11:59.335Z'
---

## Overview

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user.

## Affected

- `gemini-cli-extension <= 1.0.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.