Live › vulnerability › CVE-2026-117560
Go to dashboardThe ATXP extension for Gemini CLI (version 1.0.0 and earlier) passes MCP tool parameters into a shell command without sanitizing them. An attacker who plants text such as $() or backtick substitutions in an email or SMS can get commands run as the user running Gemini CLI.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run the ATXP extension for Gemini CLI at version 1.0.0 or earlier and let it process email or SMS content through MCP tools are exposed. The sources do not say whether other ATXP components or other Gemini CLI extensions are affected, so those are unknown; users who do not have this extension installed can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user.
This page as .md · .json · in your agent: get_signal("CVE-2026-117560")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.