Sources
- Gemini CLI and Code Assist documentation: Configuration · Sandboxing · Trusted folders · Policy engine · MCP servers · Code Assist agent mode
- Google: Transitioning Gemini CLI to Antigravity CLI
- Vulnerabilities: GitHub advisory, CVE-2026-12537 · NVD, CVE-2026-12537
- Research: Tracebit · Comment and Control · Cymulate, ProgramData configuration · AIR Security, Plugin4Shell · Cyera
This post is informational and comes with no guarantee of a vulnerability-free setup, so test every configuration in your own environment. AISecurityLabs.org is independent and not affiliated with Google. Gemini is a trademark of its owner, used here only to identify the product.