Hub/AI Security/Gemini CLI
Gemini CLI
Google · Official site
3 Yes3 Partial0 No4 Unknown
| Feature | Status | Notes | Source | Checked |
|---|---|---|---|---|
| Tool-call approval prompts | Yes | Confirmations on by default; per-server trust:true bypasses them | Source | 2026-11-04 |
| Per-tool allow / deny | Yes | includeTools / excludeTools per server | Source | 2026-11-04 |
| Sandboxing | Partial | Opt-in sandbox via -s or GEMINI_SANDBOX | Source | 2026-11-04 |
| OAuth for remote MCP | Yes | OAuth incl. DCR | Source | 2026-11-04 |
| Verified marketplace listings | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Auto-install / auto-update control | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Admin allowlists | Partial | System settings file overrides user settings | Source | 2026-11-04 |
| Audit logs | Partial | Telemetry export for auditing | Source | 2026-11-04 |
| Data retention / training opt-out | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Security disclosure page | Unknown | No repo advisories; one GHSA exists in the global database | — | 2026-11-04 |
Advisories (1)
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Gemini CLI · CVE-2026-12537 · GHSA-wpqr-6v78-jr5g
Across the hub
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.