Critical Gemini CLI Vulnerability Enables Remote Code Execution Attacks

Google released urgent security updates addressing a critical RCE vulnerability in the Gemini CLI and its GitHub Action that allowed attackers to bypass workspace trust and tool allowlists in headless CI/CD workflows. Attackers could inject malicious environment variables, perform prompt- and command-injection, execute arbitrary code, steal secrets, and modify code in automated pipelines. Google published fixes (Gemini CLI 0.39.1 / 0.40.0-preview.3 and Action 0.1.22) and recommends enforcing explicit workspace trust, strict tool allowlists, and auditing CI/CD pipelines.