TL;DR

Filtering GEMINI_CLI_IDE_SERVER_STDIO_COMMAND and GEMINI_CLI_IDE_SERVER_STDIO_ARGS from the workspace environment by default is likely to prevent arbitrary shell code execution.

Guidance

• Identify the source of the .env loading process and modify it to exclude GEMINI_CLI_IDE_SERVER_STDIO_COMMAND and GEMINI_CLI_IDE_SERVER_STDIO_ARGS from the workspace environment.
• Verify that the IDE mode is not enabled globally or restrict access to trusted repositories to mitigate the vulnerability.
• Consider implementing input validation and sanitization for .env files to prevent malicious repository creation.
• Review the current security measures in place for handling untrusted workspaces and consider enhancing them to prevent similar vulnerabilities.

Notes

The provided information does not specify the exact implementation details of the .env loading process, so the guidance is focused on the general approach to addressing the vulnerability.

Recommendation

Apply workaround: Filter the specified stdio configuration variables from the workspace environment by default to prevent potential arbitrary shell code execution.