New post: CVSS 10.0 in Gemini CLI. Google's AI agent trusted the workspace by default. An attacker's PR planted a config file. The agent loaded it before its sa
A critical vulnerability with a CVSS score of 10.0 has been discovered in Google's Gemini CLI, allowing an attacker to execute arbitrary code by submitting a pull request that includes a malicious configuration file. This exploit bypasses security measures by loading the compromised file before the agent's sandbox is activated. The incident is part of a larger trend of security breaches affecting AI tools, with other recent examples including CursorJacking and a supply chain attack on Vercel's AI tool. AI
IMPACT Highlights critical security flaws in AI agent trust models, potentially impacting enterprise adoption and requiring enhanced supply chain security.