Flaw in Gemini CLI AI coding assistant allowed stealthy code execution

Published on July 28, 2025

A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs. [...]