CVE-2026-13745 | Google Cloud Gemini CLI/run-gemini-cli GitHub Action prior 0.1.22 Env File GEMINI_CLI_HOME input validation

September 10, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Google Cloud Gemini CLI and run-gemini-cli GitHub Action. This vulnerability affects unknown code of the component Env File Handler. Executing a manipulation of the argument GEMINI_CLI_HOME can lead to improper input validation.

This vulnerability appears as CVE-2026-13745. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More