CVEs / CVE-2026-54785
CVE-2026-54785
gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1.
Affected products · 1
| Product | Versions affected | Fixed in |
|---|---|---|
| Google: Gemini CLI | not stated by CPE | — |
Versions as NVD's CPE configuration states them; "—" means the record gives no fixed version, not that none exists. Check the vendor's advisory in the references.
In this registry
- Gemini CLI — agent dossier
References · 4
- github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801
- github.com/eLyiN/gemini-bridge/pull/9
- github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1
- github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp
The official record's references, as NVD lists them, minus any tagged Exploit. Nothing here is an exploit or a proof of concept.
Description, scores, versions and references are the official CVE record's own, retrieved 2026-10-25 from NVD. Category, attack surface and cross-links are this registry's classification and can be wrong — use the button above. Not a severity assessment for your deployment.