gemini-bridge exposes an endpoint that allows the consult_gemini_with_files function to read any file path supplied in the files argument when run in inline mode. The contents of the requested file are then forwarded to the Gemini CLI and echoed back through the AI round‑trip, exposing the attacker to arbitrary local file reads. This vulnerability aligns with CWE‑200 (Information Exposure) and CWE‑22 (Path Traversal), and could allow an adversary to obtain sensitive configuration files, credentials, or other data residing on the host machine.

Both the eLyiN vendor’s gemini-bridge product from version 1.0.0 up through 1.3.0 inclusive is vulnerable. The issue was resolved in the 1.3.1 release, so any deployment of gemini-bridge prior to that tag must be patched or otherwise mitigated.

With a CVSS score of 6.2 the vulnerability is considered moderate; the EPSS score of less than 1 % indicates a low likelihood of exploitation, and it is not currently listed in CISA’s KEV catalog. The attack vector is local, requiring the attacker to invoke the vulnerable function on the target host; in many deployments gemini-bridge is accessed locally and would therefore be susceptible if an attacker gains local access or can co‑operate with a legitimate user to supply the file argument.