Gemini Cli Extension
Monthly
OS command injection in the ATXP Gemini CLI extension through 1.0.0 lets an attacker who controls email or SMS fields such as message_id, subject, or query execute shell commands through MCP tool calls, running at the victim user's privilege level. The victim must be running the extension and route the crafted message through its tools; the supplied CVSS 4.0 score is 8.5 (High), and no public exploit is identified at time of analysis, with no KEV status provided in the supplied data. No fixed version is stated in the available intelligence.
OS command injection in the ATXP Gemini CLI extension through 1.0.0 lets an attacker who controls email or SMS fields such as message_id, subject, or query execute shell commands through MCP tool calls, running at the victim user's privilege level. The victim must be running the extension and route the crafted message through its tools; the supplied CVSS 4.0 score is 8.5 (High), and no public exploit is identified at time of analysis, with no KEV status provided in the supplied data. No fixed version is stated in the available intelligence.