Topic: developer tool vulnerabilities

Gemini CLI flaw lets hackers execute malicious commands

Google's Gemini CLI tool, an AI-powered coding assistant, was found vulnerable to malicious command execution shortly after its release, allowing attackers to bypass safeguards and extract sensitive data. Researchers demonstrated a two-step exploit using seemingly harmless documentation files (li...