Vulnerabilities · 132 days ago

Google Gemini CLI security update

Pillar found a CVSS 10 Gemini CLI --yolo allowlist bypass enabling supply-chain pushes; Google patched v0.39.1; Adversa's TrustFall shows similar auto-approve MCP risks across multiple AI CLIs.

Timeline

• May 7 Reported by Dark Reading

Sources

2 sources covering this story

• Dark Reading May 7

  'TrustFall' Exposes Claude Code Execution Risk

  Malicious repositories can trigger code execution in Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI with minimal or no user interaction.

• SecurityWeek May 7

  Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack

  Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue.

Part of the PlainSec briefing for 2026-05-07

Editions

• Briefing for 2026-05-07

Related stories

• Anthropic Claude Code security update