PRE-TASK RCE IN GOOGLE GEMINI CLI (CVE-2026-12537)

Summary from the TLDR InfoSec newsletter

Novee researchers disclosed a CVSS 10.0 pre-task RCE in Gemini CLI where GEMINI_SANDBOX_PROXY_COMMAND in .gemini/.env reached a host shell via spawn(..., { shell: true }) before the sandbox even started,