{
 "type": "bundle",
 "id": "bundle--994054f5-d5a0-58fd-b958-e45da52848e5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--df246a21-e7a8-524d-bf4c-3ad9c740b255",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "Gemini CLI: a README plus an allow-list bypass gives silent command execution",
   "description": "A repository README carries hidden instructions; a benign command the user had allow-listed is chained with a second command that exfiltrates environment variables, with output padded so the user sees nothing. Fixed in Gemini CLI 0.1.14.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-004",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-004/"
    },
    {
     "source_name": "Tracebit",
     "url": "https://tracebit.com/blog/code-exec-deception-gemini-ai-cli-hijack",
     "description": "Using deception to catch a Gemini CLI hijack"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--e48aef49-0c1e-5fb5-8c0a-6799c45e0725",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "Security researchers (Tracebit), proof of concept",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--d012a7f1-f0b6-573d-806a-e78900ae97b5",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "Google — fixed in Gemini CLI 0.1.14",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--cf54f2b9-df58-5acd-9f8c-a2117f00da75",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--1622913d-2a32-5565-ae62-a94dc2f28d65",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--ec664bf1-b4aa-5b1d-acee-eba94432ab75",
   "created": "2025-07-28T00:00:00.000Z",
   "modified": "2025-07-28T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}