PT-2026-66872 · Unknown · Gemini-Bridge

CVE-2026-54785 · Published 2026-07-31 · Updated 2026-07-31

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions gemini-bridge versions 1.0.0 through 1.3.0

Description The consult gemini with files() function in inline mode allows an arbitrary local file read. When the mode is set to "inline", the server reads any file path provided in the files argument without restricting it to the working directory and forwards the content to the Gemini CLI. Since the caller also controls the query variable, the file contents are echoed back through the Gemini round-trip. This allows an MCP client or a prompt-injected LLM to access any file the server process can reach, such as SSH keys, cloud credentials, and environment files. The issue occurs because the resolve path function failed to confine paths, allowing absolute paths, symlink escapes, and directory traversal via ...

Recommendations Update gemini-bridge to version 1.3.1. As a temporary workaround, avoid using mode="inline" with untrusted files input. Run the server using a user account with restricted permissions.

Fix

Information Disclosure

Path traversal

Weakness Enumeration

CWE-200

CWE-22

Related Identifiers

CVE-2026-54785

GHSA-C5PX-58J2-7FQP

Affected Products

Gemini-Bridge

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-54785 · Security Note
• https://osv.dev/vulnerability/GHSA-c5px-58j2-7fqp · Vendor Advisory
• https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1 · Note
• https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801 · Note
• https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp · Note
• https://github.com/eLyiN/gemini-bridge/pull/9 · Note
• https://github.com/eLyiN/gemini-bridge · Note