Google CloudCVE-2026-13745

Google Cloud Gemini CLI: code execution

High7.7CVE-2026-13745 · Published Sep 10, 2026 · updated Sep 23, 2026

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted directory. The vulnerability is triggered via untrusted .env files overriding GEMINI_CLI_HOME to load malicious configuration files and bypass folder trust prompts.

Google Cloud advisory

Affected versions

Package	Affected	Fixed in
Gemini CLI Product	< 0.39.1	0.39.1

Details and references

CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-15, CWE-829

More Google Cloud advisories

All Google Cloud

Date	Advisory	Severity	Fixed in
Sep 15	Google Cloud Gemini Enterprise Agent Platform SDK: remote code execution High7.7Sep 15 CVE-2026-194071.165.1	High7.7	1.165.1
Sep 11	Google Cloud Gemini Enterprise: server-side request forgery High8.7Sep 11 CVE-2026-194862026-06-01	High8.7	2026-06-01
Sep 9	Google Cloud Agent Development Kit (ADK) for Python: code injection Critical10.0Sep 9 CVE-2026-796962.7.0	Critical10.0	2.7.0
Sep 4	Google Cloud Agent Development Kit (ADK): path traversal High8.7Sep 4 CVE-2026-797071.22.0	High8.7	1.22.0
Sep 4	Google Cloud Integration Connectors: missing authorization High8.5Sep 4 CVE-2026-46442025-12-11	High8.5	2025-12-11
Aug 31	Google Cloud Build: improper authorization Critical9.4Aug 31 CVE-2026-194102026-06-24	Critical9.4	2026-06-24

Affected versions

More Google Cloud advisories

Critical advisories by email