CVE-2026-54785 Details
Description
gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1.
A path traversal vulnerability has been identified in the Gemini-Bridge tool, specifically in versions 1.0.0 prior to 1.3.1. The issue arises in the 'consult_gemini_with_files' function when used in inline mode, where it improperly handles file paths provided by the user. Instead of restricting file access to the working directory, the function allows reading of any file the server process can access. This includes sensitive files such as SSH keys and environment variables. The read file contents are then sent to the Gemini CLI and disclosed through the tool's response, creating an arbitrary local file read vulnerability.
Users are advised to upgrade to Gemini-Bridge version 1.3.1, which addresses the vulnerability by confining file attachments to the working directory. The updated version also includes additional checks to prevent similar issues in the future.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 31, 2026CISA-ADP
Assessed Aug 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801 | [email protected] | Source CodeVendor |
| https://github.com/eLyiN/gemini-bridge/pull/9 | [email protected] | Issue TrackingVendor |
| https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1 | [email protected] | Vendor |
| https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| eLyiN gemini-bridge | >= 1.0.0, < 1.3.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 3, 2026 | CVE Modified | CISA-ADP |
| Jul 31, 2026 | New CVE Received | [email protected] |