Gemini CLI

Definition

Gemini CLI is google’s command-line interface for interacting with gemini models in agentic coding workflows. Distributed as @google/gemini-cli npm package with companion google-github-actions/run-gemini-cli GitHub Action for CI/CD integration.

Key Features

• Headless mode for CI/CD pipelines
• Workspace configuration via .gemini/.env files
• --yolo mode for auto-approved tool execution
• Tool allowlisting via ~/.gemini/settings.json

Security (June 2026)

• CVE-2026-12537 (GHSA-wpqr-6v78-jr5g): CVSS 10.0 RCE via malicious .gemini/.env in untrusted workspaces on headless CI (2026-06-29-google-gemini-cli-cve-2026-12537)
• Patched versions: gemini-cli ≥0.39.1, run-gemini-cli ≥0.1.22
• v0.39.1 breaking change: tool allowlist enforced even under --yolo mode
• Remediation: never set GEMINI_CLI_TRUST_WORKSPACE=true on untrusted PR/fork inputs

Related

• google
• google-cloud
• gemini
• coding-agents
• ci-cd
• supply-chain-security
• github-actions
• devsecops

Sources

• 2026-06-29-google-gemini-cli-cve-2026-12537
• 2026-06-29-novee-gemini-cli-cve-research
• 2026-06-29-csa-gemini-cli-supply-chain-cvss10