---
id: 6131
title: "How We Found 5 Ways to Hack Any Developer Using Google Gemini CLI"
source_domain: bugbunny.ai
source_url: "https://bugbunny.ai/blog/google-gemini-cli-rce-2025"
published_at: "2026-01-27T00:00:00Z"
tags: ["ai-security", "cloud", "rce", "supply-chain", "vulnerability-research", "mcp", "gemini-cli"]
phying_url: "https://phying.com/item/6131"
lang: en
---

# How We Found 5 Ways to Hack Any Developer Using Google Gemini CLI

## Summary

BugBunny found five RCE paths in Google Gemini CLI: no workspace-trust gate—poisoned env files, malicious MCP servers and shell-filter bypasses execute when someone runs `gemini` in a cloned repo.

## Intelligence Metadata

- **Sources:** bugbunny.ai
- **Published:** 2026-01-27T00:00:00Z
- **Original:** https://bugbunny.ai/blog/google-gemini-cli-rce-2025
- **Phying News:** https://phying.com/item/6131