Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

google-gemini/gemini-cli

              main @ f8541cf
            

127

Fixes

CVEs

HIGH

Peak severity

41.7%

Coverage

Highlights

Auth Bypass: 38 prior fixes. Scrutinize any change in this area.

packages/cli/src/config/config.ts: most-fixed (7 issues). Treat as high-risk during review.

68 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Improper neutralization of shell arguments passed to the container launcher allows unprivileged attackers to gain pre-sandbox host-level code execution via crafted configuration files, as addressed in CVE-2026-12537.

Auth Bypass: Malicious workspace configurations could bypass critical authorization steps if workspace settings and environment files (.env) are automatically loaded from untrusted directories without explicit user trust verification.

Sandbox Escape: Windows process creation context allowed child processes of sandboxed execution blocks to escape restrictions unless forced into specific Windows Job Objects using the CREATE_SUSPENDED flag.