Google's Gemini CLI agent could run malicious code silently

Command line AI tool lasts one month before serious vulnerability is found.

Source