Novee Security

Sources: Novee Security · Gemini CLI advisory write-up

Security research firm. Elad Meged, described on the firm’s write-up as founding engineer and security researcher, is one of two credited discoverers in GHSA-wpqr-6v78-jr5g, the CVSS 10.0 Gemini CLI advisory. Meged identified it while studying CI/CD supply-chain risk (The Register, 2026-04-30).

Novee’s contribution is the folder-trust half of that advisory: headless Gemini CLI trusting the workspace folder for configuration and environment loading, which the firm characterizes as infrastructure-level execution reached before the agent reasons and before its sandbox initializes. That sequencing claim bears on the AAI-S RA’s Runtime plane, which specifies what each control enforces and not when enforcement begins. Mechanisms and timeline: the incident record.

Only this one finding is catalogued here. The firm’s wider body of work is not assessed.