gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200.
Summary
gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| eLyiN | gemini-bridge | 1.0.0 to before 1.3.1 | 1.3.1 | Patch available | CNA |
| — | gemini-bridge (PyPI) | 1.0.0 to before 1.3.1 | 1.3.1 | Patch available | GHSA-c5px-58j2-7fqp |
- gemini-bridge VendoreLyiN Affected 1.0.0 to before 1.3.1 Fixed in 1.3.1 Patch available CNA
- gemini-bridge (PyPI) Vendor— Affected 1.0.0 to before 1.3.1 Fixed in 1.3.1 Patch available GHSA-c5px-58j2-7fqp
Remediation
- Fix · CNA gemini-bridge (eLyiN) Fixed in 1.3.1
- Fix · GHSA-c5px-58j2-7fqp gemini-bridge (PyPI) Fixed in 1.3.1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-54785
- 2026-10-03 Alias added: GHSA-c5px-58j2-7fqp
References
Other 5
- https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp
- https://github.com/eLyiN/gemini-bridge/pull/9
- https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801
- https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1
- https://github.com/eLyiN/gemini-bridge
Sources
- CVE-2026-54785 · CVE Program
- CVE-2026-54785 · NVD
- FIRST EPSS
- GHSA-c5px-58j2-7fqp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences