Pillar Security Finds Critical TrustIssues Vulnerability in gemini-cli
· Source: letsdatascience.com
In short
Pillar Security disclosed TrustIssues, a CVSS 10 supply-chain vulnerability in Google's gemini-cli AI coding agent, exploitable via a single crafted GitHub issue. The attack chains a prompt-injection vector through the agent's automated GitHub-issue triage workflow with a tool-allowlist bypass in --yolo mode, allowing arbitrary code push to the repository's main branch. The vulnerability has been fixed in gemini-cli 0.39.1 and run-gemini-cli 0.1.2, with the same vulnerable pattern identified in at least eight other Google-maintained repositories.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 20, 2026: AI-Powered Automation and Control Towers Drive Supply Chain Transformation
Tags: vulnerability, supply-chain, security, gemini-cli, prompt-injection, AI-agent