criticalresolved
gemini-mcp-tool command injection zero-day (CVE-2026-0755)
Command injection in the open-source gemini-mcp-tool MCP server, disclosed as a zero-day. CVSS 9.8.
gemini-mcp-tool is an open-source MCP server that wraps the Gemini CLI. A command-injection flaw let input reach a shell execution path without sanitization, so a crafted request ran arbitrary commands on the host. It was disclosed as a zero-day and scored CVSS 9.8.
Takeaway
An MCP server is an RPC endpoint that runs code, and the control that matters is the trust boundary around whatever reaches the execution primitive. Sanitize and parameterize any input that can influence a command before it runs.
Sources
mcpgemini-mcp-toolcommand-injectionzero-dayCVE-2026-0755