Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Hackread - Latest Cybersecurity News, Press Releases & Technolo…
May 6, 2026
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise.
Discussion in the ATmosphere