Vulnerabilities & Exploits · Supply Chain

Google Gemini CLI security update

Pillar found a CVSS 10 Gemini CLI --yolo allowlist bypass enabling supply-chain pushes; Google patched v0.39.1; Adversa's TrustFall shows similar auto-approve MCP risks across multiple AI CLIs.

2 sources · May 7

Timeline

• May 7 Reported by Dark Reading

Sources

• May 7 Dark Reading

  'TrustFall' Exposes Claude Code Execution Risk

  Malicious repositories can trigger code execution in Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI with minimal or no user interaction.

  original

• May 7 SecurityWeek

  Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack

  Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue.

  original

Part of the PlainSec briefing for 2026-05-07

Every edition of this story: Google Gemini CLI security update

More from today

• Anthropic Claude Code security update