Vendor
The ATXP Gemini CLI extension through version 1.0.0 is vulnerable to OS command injection in the runAtxp() function due to unsanitized MCP tool parameters, allowing arbitrary code execution.