A critical remote code execution and supply chain vulnerability was recently discovered by researchers in Gemini CLI.