Gemini MCP Tool vulnerabilities

Products

• gemini-mcp-tool 1

Latest Gemini MCP Tool CVEs

Newest publication first

1. CVE-2026-0755 gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability

   Published 2026-01-23

   Critical·CVSS 9.8 EPSS 3.4%

   gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability. The specific flaw exis...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.