⚠️ AI CLI Tools Security AlertCritical flaws in Claude Code & Gemini CLI allowed attackers to steal secrets via GitHub i...

⚠️ AI CLI Tools Security AlertCritical flaws in Claude Code & Gemini CLI allowed attackers to steal secrets via GitHub issues—patched now.· Gemini CLI (CVE-2026-12537, CVSS 10.0): OS command injection via crafted .env file.· Claude Code (CVE-2026-54316): Leaked API keys via exfiltration channel.Update immediately to Gemini CLI 0.39.1, run-gemini-cli 0.1.22, and Claude Code 2.1.163. Audit untrusted workflows!#Cybersecurity #AI #ClaudeCode #GeminiCLI #DevSecOps https://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.html

Read Original

Related