Gemini CLI: Critical Command Injection Vulnerability

Gemini CLI is Google's AI coding agent. It had a critical OS command injection vulnerability (CVE-2026-12537) that allowed code execution on CI hosts. Fixed in version 0.39.1.