// GeminiHIGH
CVE-2026-117560 affects ATXP Gemini CLI extension through version 1.0.0. The vulnerability is an OS command injection in the runAtxp() function that allows attackers to execute arbitrary shell commands via unsanitized MCP tool parameters such as message_id, subject, or query. Exploitation requires local access and low privileges but has high impact on system confidentiality, integrity, and availability. No public exploit code or active exploitation has been reported as of disclosure.
// Get alerts for Gemini