CVE-2026-0755 | gemini-mcp-tool execAsync command injection

January 9, 2026 Yanac

A vulnerability described as critical has been identified in gemini-mcp-tool. The affected element is the function execAsync. Executing a manipulation can lead to command injection.

The identification of this vulnerability is CVE-2026-0755. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More