{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/atxp/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:atxp:gemini_cli_extension:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-117560"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Gemini CLI extension (\u003c= 1.0.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["ATXP"],"content_html":"\u003cp\u003eThe ATXP Gemini CLI extension version 1.0.0 and earlier contains an OS command injection vulnerability within the runAtxp() function. The vulnerability is triggered when the extension processes unsanitized input via Model Context Protocol (MCP) tool parameters, specifically targeting the message_id, subject, or query fields. An attacker can supply shell substitution characters, such as $() or backticks, within email or SMS content to force the extension to execute arbitrary commands under the context of the user running the CLI tool.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to execute arbitrary shell commands with the privileges of the local user running the Gemini CLI extension, potentially leading to unauthorized data access, system modification, or persistence.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the ATXP Gemini CLI extension to a patched version beyond 1.0.0 immediately.\u003c/li\u003e\n\u003cli\u003eAudit the use of MCP tools and restrict the processing of untrusted input content (email/SMS) if the extension cannot be updated.\u003c/li\u003e\n\u003cli\u003eImplement monitoring for suspicious child processes spawned by the Gemini CLI tool.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T15:50:10Z","date_published":"2026-10-27T15:50:10Z","id":"https://feed.craftedsignal.io/briefs/2026-10-atxp-gemini-cli-rce/","summary":"The ATXP Gemini CLI extension through version 1.0.0 is vulnerable to OS command injection in the runAtxp() function due to unsanitized MCP tool parameters, allowing arbitrary code execution.","title":"ATXP Gemini CLI extension: OS command injection via MCP (CVE-2026-117560)","url":"https://feed.craftedsignal.io/briefs/2026-10-atxp-gemini-cli-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - ATXP","version":"https://jsonfeed.org/version/1.1"}