gemini-cli-extension vulnerabilities

CVEs whose affected-version data names the gemini-cli-extension package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117560High· 7.8

6d ago

ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS…

▾ Twilightatxp · gemini-cli-extensionEPSS 0.65%via CVEORG