Gemini CLI CVE-2026-12537 Suspicious .gemini/.env File Creation in Repository

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•0

Detects the creation or modification of '.env' files within '.gemini' directories, often found in CI/CD pipelines or developer environments. This activity may indicate an attempt to inject malicious environment variables to hijack the execution flow of the Gemini CLI or related tooling.