By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
World of SoftwareWorld of SoftwareWorld of Software
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Search
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
Reading: If you’re coding with Gemini CLI, you need this security update
Share
Sign In
Notification Show More
Font ResizerAa
World of SoftwareWorld of Software
Font ResizerAa
  • Software
  • Mobile
  • Computing
  • Gadget
  • Gaming
  • Videos
Search
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Have an existing account? Sign In
Follow US
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
World of Software > News > If you’re coding with Gemini CLI, you need this security update
News

If you’re coding with Gemini CLI, you need this security update

News Room
Last updated: 2025/08/03 at 10:17 PM
News Room Published 3 August 2025
Share
SHARE

Cybersecurity researchers say they’ve identified a major vulnerability within Google’s Gemini CLI, an open-source AI agent for coding. Because of the vulnerability, attackers could use prompt injection attacks to steal sensitive data, the researchers claim.

Google released a preview version of Gemini CLI in June, and this isn’t the first issue that’s been brought to light. A “vibe coder” recently described how Gemini CLI deleted his code by mistake.

Researchers at security firm Tracebit devised an attack that overrode the tool’s embedded security controls. Attackers could use an exploit to hide malicious commands, using “a toxic combination of improper validation, prompt injection and misleading UX,” as Tracebit explains.

Mashable Light Speed

Sam Cox, Tracebit’s founder, says he personally tested the exploit, which ultimately allowed him to execute any command — including destructive ones. “That’s exactly why I found this so concerning,” Cox told Ars Technica. “The same technique would work for deleting files, a fork bomb or even installing a remote shell giving the attacker remote control of the user’s machine.”

SEE ALSO:

Google Gemini deletes user’s code: ‘I have failed you completely and catastrophically’

After reports of the vulnerability surfaced, Google classified the situation as Priority 1 and Severity 1 on July 23, releasing the improved version two days later.

Those planning to use Gemini CLI should immediately upgrade to its latest version (0.1.14). Additionally, users could use the tool’s sandboxing mode for additional security and protection.

Topics
Artificial Intelligence
Google Gemini

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Twitter Email Print
Share
What do you think?
Love0
Sad0
Happy0
Sleepy0
Angry0
Dead0
Wink0
Previous Article What the change of Apple Card processor means for users
Next Article I Found Amazon’s Most Unlikely Deals of the Weekend That’ll Save You Some Serious Cash
Leave a comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

248.1k Like
69.1k Follow
134k Pin
54.3k Follow

Latest News

How To Connect Your Amazon Fire Stick Remote To A New TV – BGR
News
I can’t believe how much easier my PC is to manage with these commands
Computing
4 TV tech trends I think will shape the next 5 years
News
TransUnion data breach impacts 4.4M U.S. customers
News

You Might also Like

News

How To Connect Your Amazon Fire Stick Remote To A New TV – BGR

4 Min Read
News

4 TV tech trends I think will shape the next 5 years

9 Min Read
News

TransUnion data breach impacts 4.4M U.S. customers

1 Min Read
News

Screen Saver is one of my favorite Pixel 10 features. Here’s how to use it

7 Min Read
//

World of Software is your one-stop website for the latest tech news and updates, follow us now to get the news that matters to you.

Quick Link

  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact

Topics

  • Computing
  • Software
  • Press Release
  • Trending

Sign Up for Our Newsletter

Subscribe to our newsletter to get our newest articles instantly!

World of SoftwareWorld of Software
Follow US
Copyright © All Rights Reserved. World of Software.
Welcome Back!

Sign in to your account

Lost your password?