Code Execution Through Deception: Gemini AI CLI Hijack
Tracebit discovered a silent attack on Gemini CLI due to improper validation, prompt injection, and misleading UX leading to execution of malicious commands without user awareness. Google fixed this in v0.1.14...