TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8902
@thehackernews
The Hacker News
Post content
Post content
π Gemini and Cursor vulnerabilities exposed direct code execution in dev workflows. #Gemini CLI (CVSS 10.0) auto-trusted folders in CI, letting malicious .gemini/ configs from PRs run on hosts. #Cursor bugs triggered hidden Git hooks and exposed local API keys via extensions. π Details β https://thehackernews.com/2026/04/google-fixes-cvss-10-gemini-cli-ci-rce.html