Google Patches Critical Gemini CLI Flaw to Prevent Remote Code Execution

Google’s Gemini voice assistant can read message notifications from third-party communications apps and use their contents to help users operate their devices. Cybersecurity company SafeBreach found that this convenience feature could be exploited through a “Fake Context Alignment” attack, causing malicious content in a notification to be mistaken for a trusted instruction and creating a risk that the AI assistant could be hijacked remotely.

SafeBreach’s latest disclosure said attackers could send notifications containing hidden malicious instructions through third-party communications apps, prompting Gemini to take actions without user authorization. No monetary amount was involved, and related reports did not provide an exact disclosure date. Google has improved its content classifier to better distinguish malicious messages from legitimate notifications and reduce the risk of attack.