CVE-2026-54785

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-54785", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-15T23:23:57.714Z", "datePublished": "2026-07-31T22:31:04.190Z", "dateUpdated": "2026-08-03T16:26:53.194Z"}, "containers": {"cna": {"title": "gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp"}, {"name": "https://github.com/eLyiN/gemini-bridge/pull/9", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/pull/9"}, {"name": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801"}, {"name": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1"}], "affected": [{"vendor": "eLyiN", "product": "gemini-bridge", "versions": [{"version": ">= 1.0.0, < 1.3.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-31T22:31:04.190Z"}, "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}], "source": {"advisory": "GHSA-c5px-58j2-7fqp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-03T16:24:57.651547Z", "id": "CVE-2026-54785", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T16:26:53.194Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-54785", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-03T16:24:57.651547Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T16:25:08.927Z"}}], "cna": {"title": "gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode", "source": {"advisory": "GHSA-c5px-58j2-7fqp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "eLyiN", "product": "gemini-bridge", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.3.1"}]}], "references": [{"url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "name": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/eLyiN/gemini-bridge/pull/9", "name": "https://github.com/eLyiN/gemini-bridge/pull/9", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "name": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "name": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-31T22:31:04.190Z"}}}, "cveMetadata": {"cveId": "CVE-2026-54785", "state": "PUBLISHED", "dateUpdated": "2026-08-03T16:26:53.194Z", "dateReserved": "2026-06-15T23:23:57.714Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-31T22:31:04.190Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "gemini-bridge", "vendor": "eLyiN", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.3.1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}, {"lang": "es", "value": "gemini-bridge es un ligero servidor MCP que conecta agentes de IA con la IA Gemini de Google a trav\u00e9s de la CLI oficial. Desde la versi\u00f3n 1.0.0 hasta la 1.3.1, consult_gemini_with_files en modo en l\u00ednea le\u00eda cualquier ruta de archivo proporcionada en el argumento files sin confinarla al directorio de trabajo, luego reenviaba el contenido a la CLI de Gemini. Debido a que el llamador tambi\u00e9n controla la consulta, el contenido del archivo es devuelto a trav\u00e9s del viaje de ida y vuelta de Gemini (y enviado a Google), lo que convierte esto en una lectura arbitraria de archivos locales. Este problema est\u00e1 solucionado en la versi\u00f3n 1.3.1."}], "id": "CVE-2026-54785", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54785", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-03T16:24:57.651547Z", "version": "2.0.3"}}]}, "published": "2026-07-31T23:17:25.133", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801"}, {"source": "security-advisories@github.com", "url": "https://github.com/eLyiN/gemini-bridge/pull/9"}, {"source": "security-advisories@github.com", "url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-200"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.3.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "gemini-bridge", "source": "cna", "vendor": "eLyiN"}, "product": "gemini-bridge", "vendor": "elyin"}], "created": "2026-08-02T04:00:06.800251+00:00", "updated": "2026-08-02T20:32:05.583237+00:00", "vendors": ["elyin", "elyin$PRODUCT$gemini-bridge"]}