Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE

Researchers at Pillar Security discovered a critical CVSS 10 vulnerability in Google’s Gemini CLI and related GitHub Actions where an AI agent running in “--yolo” mode auto-executed hidden commands from public GitHub Issues, exfiltrated credentials (saved by actions/checkout in .git/config), and could be used in a full supply-chain takeover; a proof-of-concept demonstrated privilege escalation and code modification paths, and Google released advisories and patches (Gemini CLI 0.39.1 and run-gemini-cli 0.1.22) to mitigate the issue.