A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers' computers using allowlisted programs.

Despite the apparent threat, Amazon noted the code was malformed and wouldn't execute in user environments, but some ...