CVE-2026-0755
Command Injection in gemini-mcp-tool execAsync Enables RCE
Publication date: 2026-01-23
Last updated on: 2026-01-23
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gemini_mcp_tool | gemini_mcp_tool | to 2026-07-01 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a critical remote code execution flaw in the gemini-mcp-tool's execAsync method. It occurs because the method does not properly validate a user-supplied string before using it to execute a system call. This allows remote attackers to execute arbitrary code on the affected system without needing to authenticate. [1]
How can this vulnerability impact me? :
Exploitation of this vulnerability allows attackers to run arbitrary code with the privileges of the service account running gemini-mcp-tool. This can lead to a full compromise of the system's confidentiality, integrity, and availability, potentially allowing attackers to control the affected system remotely. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows remote attackers to execute arbitrary code without authentication, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. Such a compromise can result in unauthorized access to sensitive data, which may lead to violations of compliance requirements under standards like GDPR and HIPAA that mandate protection of personal and health information. [1]