{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-54785", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-15T23:23:57.714Z", "datePublished": "2026-07-31T22:31:04.190Z", "dateUpdated": "2026-08-03T16:26:53.194Z"}, "containers": {"cna": {"title": "gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp"}, {"name": "https://github.com/eLyiN/gemini-bridge/pull/9", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/pull/9"}, {"name": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801"}, {"name": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1"}], "affected": [{"vendor": "eLyiN", "product": "gemini-bridge", "versions": [{"version": ">= 1.0.0, < 1.3.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-31T22:31:04.190Z"}, "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}], "source": {"advisory": "GHSA-c5px-58j2-7fqp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-03T16:24:57.651547Z", "id": "CVE-2026-54785", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T16:26:53.194Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-54785", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-03T16:24:57.651547Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T16:25:08.927Z"}}], "cna": {"title": "gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode", "source": {"advisory": "GHSA-c5px-58j2-7fqp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "eLyiN", "product": "gemini-bridge", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.3.1"}]}], "references": [{"url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "name": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/eLyiN/gemini-bridge/pull/9", "name": "https://github.com/eLyiN/gemini-bridge/pull/9", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "name": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "name": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-31T22:31:04.190Z"}}}, "cveMetadata": {"cveId": "CVE-2026-54785", "state": "PUBLISHED", "dateUpdated": "2026-08-03T16:26:53.194Z", "dateReserved": "2026-06-15T23:23:57.714Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-31T22:31:04.190Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "gemini-bridge", "vendor": "eLyiN", "versions": [{"status": "affected", "version": ">= 1.0.0, < 1.3.1"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1."}], "id": "CVE-2026-54785", "lastModified": "2026-08-03T17:16:38.353", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54785", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-03T16:24:57.651547Z", "version": "2.0.3"}}]}, "published": "2026-07-31T23:17:25.133", "references": [{"source": "[email protected]", "url": "https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801"}, {"source": "[email protected]", "url": "https://github.com/eLyiN/gemini-bridge/pull/9"}, {"source": "[email protected]", "url": "https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1"}, {"source": "[email protected]", "url": "https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-200"}], "source": "[email protected]", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.3.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "gemini-bridge", "source": "cna", "vendor": "eLyiN"}, "product": "gemini-bridge", "vendor": "elyin"}], "created": "2026-08-02T04:00:06.800251+00:00", "updated": "2026-08-02T20:32:05.583237+00:00", "vendors": ["elyin", "elyin$PRODUCT$gemini-bridge"]}