Critical Gemini CLI Bug with CVSS 10.0 Could Break CI/CD Pipelines

Google auto-patched a critical vulnerability (CVSS 10.0) in Gemini CLI capable of arbitrary remote code execution in CI/CD pipelines.

Published 17sem1 sourceMajor

≈ 18sSpeed

The fact

However, the fix itself could break certain dependencies in existing deployment chains, creating new disruption risk.

Click the link to read an article on the topic:

Explore this topic

Risque de rupture des pipelines CI/CD suite au patch automatique du bug Gemini CLI

RCE possible dans les environnements de déploiement avant patch

Auto-synthesis from 1 media source · identified on April 30, 2026