{"id":47806,"date":"2026-05-03T22:58:22","date_gmt":"2026-05-03T15:58:22","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47806"},"modified":"2026-05-05T22:59:08","modified_gmt":"2026-05-05T15:59:08","slug":"lo-hong-rce-diem-10-trong-gemini-cli-canh-cua-mo-cho-hacker-khai-thac","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-rce-diem-10-trong-gemini-cli-canh-cua-mo-cho-hacker-khai-thac\/","title":{"rendered":"L\u1ed7 h\u1ed5ng RCE “\u0111i\u1ec3m 10” trong Gemini CLI: C\u00e1nh c\u1eeda m\u1edf cho hacker khai th\u00e1c"},"content":{"rendered":"
AI \u0111ang \u0111\u01b0\u1ee3c \u0111\u01b0a th\u1eb3ng v\u00e0o quy tr\u00ecnh ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m, m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong c\u00f4ng c\u1ee5 Gemini CLI c\u1ee7a Google v\u1eeba \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 \u0111\u00e3 cho th\u1ea5y r\u1ee7i ro kh\u00f4ng n\u1eb1m \u1edf tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o m\u00e0 n\u1eb1m \u1edf c\u00e1ch con ng\u01b0\u1eddi t\u00edch h\u1ee3p n\u00f3 v\u00e0o h\u1ec7 th\u1ed1ng. L\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) v\u1edbi \u0111i\u1ec3m CVSS 10 \u0111ang khi\u1ebfn to\u00e0n b\u1ed9 chu\u1ed7i CI\/CD tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau t\u1ea5n c\u00f4ng ti\u1ec1m n\u0103ng trong c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng.<\/b>
\n\u200b<\/div>\n
\n
\"1000037782.jpg\"<\/div>\n<\/div>\n
L\u1ed7 h\u1ed5ng l\u00e0 g\u00ec v\u00e0 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n nh\u01b0 th\u1ebf n\u00e0o?\u200b<\/div>\n
L\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Elad Meged c\u00f9ng \u0111\u1ed9i ng\u0169 Novee Security. N\u00f3 t\u1ed3n t\u1ea1i trong hai th\u00e0nh ph\u1ea7n quan tr\u1ecdng: g\u00f3i @google\/gemini-cli v\u00e0 GitHub Action google-github-actions\/run-gemini-cli.<\/p>\n

V\u1ec1 b\u1ea3n ch\u1ea5t, \u0111\u00e2y l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng RCE cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1eeb xa th\u1ef1c thi l\u1ec7nh tr\u00ean h\u1ec7 th\u1ed1ng m\u1ee5c ti\u00eau m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c. V\u1edbi \u0111i\u1ec3m CVSS 10 do Google \u0111\u00e1nh gi\u00e1, m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u1ea1t m\u1ee9c t\u1ed1i \u0111a, t\u01b0\u01a1ng \u0111\u01b0\u01a1ng c\u00e1c s\u1ef1 c\u1ed1 l\u1edbn t\u1eebng l\u00e0m rung chuy\u1ec3n ng\u00e0nh an ninh m\u1ea1ng.\u200b<\/p><\/div>\n

Nguy\u00ean nh\u00e2n c\u1ed1t l\u00f5i: Tin t\u01b0\u1edfng sai ch\u1ed7\u200b<\/div>\n
G\u1ed1c r\u1ec5 c\u1ee7a v\u1ea5n \u0111\u1ec1 kh\u00f4ng n\u1eb1m \u1edf AI, m\u00e0 n\u1eb1m \u1edf c\u00e1ch Gemini CLI x\u1eed l\u00fd \u201cni\u1ec1m tin\u201d.<\/p>\n

Trong c\u00e1c m\u00f4i tr\u01b0\u1eddng kh\u00f4ng t\u01b0\u01a1ng t\u00e1c nh\u01b0 CI\/CD, Gemini CLI (t\u1ef1 \u0111\u1ed9ng t\u1ea3i v\u00e0 tin t\u01b0\u1edfng c\u00e1c file c\u1ea5u h\u00ecnh trong workspace) m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c hay ph\u00ea duy\u1ec7t t\u1eeb ng\u01b0\u1eddi d\u00f9ng. \u0110i\u1ec1u n\u00e0y t\u1ea1o ra m\u1ed9t \u201c\u0111i\u1ec3m m\u00f9 b\u1ea3o m\u1eadt\u201d: b\u1ea5t k\u1ef3 n\u1ed9i dung n\u00e0o n\u1eb1m trong repository \u0111\u1ec1u c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c coi l\u00e0 h\u1ee3p l\u1ec7.<\/p>\n

V\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf ch\u1ed7: repository \u0111\u00f3 kh\u00f4ng ph\u1ea3i l\u00fac n\u00e0o c\u0169ng \u201cs\u1ea1ch\u201d.\u200b<\/p><\/div>\n

C\u01a1 ch\u1ebf khai th\u00e1c: T\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n hack AI\u200b<\/div>\n
\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y kh\u00f4ng li\u00ean quan \u0111\u1ebfn prompt injection hay thao t\u00fang AI. N\u00f3 di\u1ec5n ra ho\u00e0n to\u00e0n \u1edf t\u1ea7ng h\u1ea1 t\u1ea7ng.<\/p>\n

K\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng di\u1ec5n ra kh\u00e1 \u201c\u0111\u01a1n gi\u1ea3n nh\u01b0ng ch\u1ebft ng\u01b0\u1eddi\u201d:<\/p>\n

K\u1ebb t\u1ea5n c\u00f4ng g\u1eedi m\u1ed9t pull request ch\u1ee9a file c\u1ea5u h\u00ecnh \u0111\u1ed9c h\u1ea1i v\u00e0o repository. Khi h\u1ec7 th\u1ed1ng CI\/CD ch\u1ea1y t\u1ef1 \u0111\u1ed9ng, Gemini CLI s\u1ebd t\u1ea3i c\u00e1c file n\u00e0y m\u00e0 kh\u00f4ng ki\u1ec3m tra. Do m\u1eb7c \u0111\u1ecbnh tin t\u01b0\u1edfng workspace, c\u00f4ng c\u1ee5 s\u1ebd th\u1ef1c thi c\u00e1c l\u1ec7nh \u0111\u01b0\u1ee3c nh\u00fang trong file c\u1ea5u h\u00ecnh.<\/p>\n

L\u00fac n\u00e0y, m\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ee7 CI\/CD tr\u01b0\u1edbc khi b\u1ea5t k\u1ef3 c\u01a1 ch\u1ebf sandbox n\u00e0o k\u1ecbp can thi\u1ec7p. Hacker kh\u00f4ng c\u1ea7n v\u01b0\u1ee3t qua AI, kh\u00f4ng c\u1ea7n \u0111\u00e1nh l\u1eeba m\u00f4 h\u00ecnh, m\u00e0 ch\u1ec9 c\u1ea7n \u201c\u0111i c\u1eeda sau\u201d qua quy tr\u00ecnh t\u1ef1 \u0111\u1ed9ng h\u00f3a.\u200b<\/p><\/div>\n

M\u1ee9c \u0111\u1ed9 \u1ea3nh h\u01b0\u1edfng: Kh\u00f4ng ch\u1ec9 l\u00e0 m\u1ed9t repo b\u1ecb hack\u200b<\/div>\n
N\u1ebfu khai th\u00e1c th\u00e0nh c\u00f4ng, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3:\u200b<\/div>\n
    \n
  • \n
    Truy c\u1eadp to\u00e0n b\u1ed9 m\u00e3 ngu\u1ed3n v\u00e0 artifact build c\u1ee7a d\u1ef1 \u00e1n\u200b<\/div>\n<\/li>\n
  • \n
    L\u1ea5y c\u1eafp secrets v\u00e0 credentials trong m\u00f4i tr\u01b0\u1eddng CI\/CD\u200b<\/div>\n<\/li>\n
  • \n
    Chi\u1ebfm quy\u1ec1n c\u00e1c token d\u1ecbch v\u1ee5 cloud\u200b<\/div>\n<\/li>\n
  • \n
    Di chuy\u1ec3n ngang sang c\u00e1c h\u1ec7 th\u1ed1ng production li\u00ean k\u1ebft\u200b<\/div>\n<\/li>\n<\/ul>\n
    \u0110i\u1ec1u n\u00e0y bi\u1ebfn l\u1ed7 h\u1ed5ng t\u1eeb m\u1ed9t l\u1ed7i k\u1ef9 thu\u1eadt th\u00e0nh n\u01a1i m\u1ed9t repo nh\u1ecf c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh b\u00e0n \u0111\u1ea1p \u0111\u1ec3 x\u00e2m nh\u1eadp to\u00e0n b\u1ed9 h\u1ec7 sinh th\u00e1i.\u200b<\/div>\n
    B\u1ee9c tranh l\u1edbn h\u01a1n: M\u1ed9t xu h\u01b0\u1edbng \u0111\u00e1ng lo\u200b<\/div>\n
    L\u1ed7 h\u1ed5ng n\u00e0y kh\u00f4ng ph\u1ea3i l\u00e0 s\u1ef1 ki\u1ec7n \u0111\u01a1n l\u1ebb. N\u00f3 xu\u1ea5t hi\u1ec7n trong b\u1ed1i c\u1ea3nh h\u00e0ng lo\u1ea1t v\u1ee5 t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng g\u1ea7n \u0111\u00e2y nh\u01b0 XZ Utils, Polyfill.io hay v\u1ee5 chi\u1ebfm quy\u1ec1n axios npm n\u0103m 2026.\u200b<\/div>\n
    \u0110i\u1ec3m chung l\u00e0 g\u00ec?\u200b<\/div>\n
    Hacker kh\u00f4ng t\u1ea5n c\u00f4ng tr\u1ef1c di\u1ec7n v\u00e0o h\u1ec7 th\u1ed1ng ch\u00ednh, m\u00e0 khai th\u00e1c “ni\u1ec1m tin” trong chu\u1ed7i ph\u1ee5 thu\u1ed9c.<\/p>\n

    V\u1edbi s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a AI agent trong pipeline, v\u1ea5n \u0111\u1ec1 c\u00e0ng ph\u1ee9c t\u1ea1p h\u01a1n. C\u00e1c c\u00f4ng c\u1ee5 n\u00e0y c\u00f3 quy\u1ec1n t\u01b0\u01a1ng \u0111\u01b0\u01a1ng developer, \u0111\u1ecdc c\u00f9ng workspace, ch\u1ea1y c\u00f9ng m\u00f4i tr\u01b0\u1eddng, nh\u01b0ng l\u1ea1i ch\u01b0a \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 \u0111\u1ea7y \u0111\u1ee7 v\u1ec1 m\u1eb7t b\u1ea3o m\u1eadt h\u1ec7 th\u1ed1ng.\u200b<\/p><\/div>\n

    \u0110\u00e3 c\u00f3 b\u1ea3n v\u00e1, nh\u01b0ng ch\u01b0a ph\u1ea3i l\u00e0 k\u1ebft th\u00fac\u200b<\/div>\n
    Google \u0111\u00e3 ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 cho l\u1ed7 h\u1ed5ng n\u00e0y trong:\u200b<\/div>\n
      \n
    • \n
      @google\/gemini-cli phi\u00ean b\u1ea3n 0.39.1 v\u00e0 0.40.0-preview.3\u200b<\/div>\n<\/li>\n
    • \n
      google-github-actions\/run-gemini-cli phi\u00ean b\u1ea3n 0.1.22\u200b<\/div>\n<\/li>\n<\/ul>\n
      Tuy nhi\u00ean, vi\u1ec7c v\u00e1 l\u1ed7i ch\u1ec9 l\u00e0 x\u1eed l\u00fd ph\u1ea7n \u201cng\u1ecdn\u201d. Ph\u1ea7n \u201cg\u1ed1c\u201d v\u1eabn l\u00e0 c\u00e1ch c\u00e1c t\u1ed5 ch\u1ee9c hi\u1ec3u v\u00e0 qu\u1ea3n l\u00fd ni\u1ec1m tin trong pipeline.\u200b<\/div>\n
      Khuy\u1ebfn ngh\u1ecb t\u1eeb g\u00f3c nh\u00ecn chuy\u00ean gia\u200b<\/div>\n
      \u0110\u00e2y kh\u00f4ng c\u00f2n l\u00e0 c\u00e2u chuy\u1ec7n \u201cv\u00e1 l\u1ed7i hay kh\u00f4ng\u201d m\u00e0 l\u00e0 c\u00e1ch \u201cqu\u1ea3n tr\u1ecb r\u1ee7i ro h\u1ec7 th\u1ed1ng th\u1ebf n\u00e0o\u201d. C\u00e1c \u0111\u1ed9i ng\u0169 b\u1ea3o m\u1eadt c\u1ea7n nh\u00ecn AI agent nh\u01b0 m\u1ed9t th\u00e0nh ph\u1ea7n h\u1ea1 t\u1ea7ng c\u00f3 \u0111\u1eb7c quy\u1ec1n cao, kh\u00f4ng ph\u1ea3i ch\u1ec9 l\u00e0 c\u00f4ng c\u1ee5 h\u1ed7 tr\u1ee3.<\/p>\n

      M\u1ed9t s\u1ed1 khuy\u1ebfn ngh\u1ecb quan tr\u1ecdng:\u200b<\/p><\/div>\n

        \n
      • \n
        C\u1eadp nh\u1eadt ngay c\u00e1c phi\u00ean b\u1ea3n \u0111\u00e3 v\u00e1 c\u1ee7a Gemini CLI v\u00e0 GitHub Action li\u00ean quan\u200b<\/div>\n<\/li>\n
      • \n
        R\u00e0 so\u00e1t to\u00e0n b\u1ed9 log CI\/CD \u0111\u1ec3 ph\u00e1t hi\u1ec7n h\u00e0nh vi t\u1ea3i config b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n
      • \n
        Kh\u00f4ng cho ph\u00e9p t\u1ef1 \u0111\u1ed9ng th\u1ef1c thi file c\u1ea5u h\u00ecnh t\u1eeb pull request ch\u01b0a \u0111\u01b0\u1ee3c ki\u1ec3m duy\u1ec7t\u200b<\/div>\n<\/li>\n
      • \n
        \u00c1p d\u1ee5ng nguy\u00ean t\u1eafc \u201czero trust\u201d v\u1edbi workspace, k\u1ec3 c\u1ea3 n\u1ed9i dung n\u1ed9i b\u1ed9\u200b<\/div>\n<\/li>\n
      • \n
        T\u00e1ch bi\u1ec7t m\u00f4i tr\u01b0\u1eddng CI\/CD v\u1edbi h\u1ec7 th\u1ed1ng production \u0111\u1ec3 h\u1ea1n ch\u1ebf lan r\u1ed9ng\u200b<\/div>\n<\/li>\n
      • \n
        Gi\u1edbi h\u1ea1n quy\u1ec1n truy c\u1eadp c\u1ee7a token v\u00e0 secrets trong pipeline\u200b<\/div>\n<\/li>\n
      • \n
        Thi\u1ebft l\u1eadp c\u01a1 ch\u1ebf ki\u1ec3m tra file c\u1ea5u h\u00ecnh tr\u01b0\u1edbc khi th\u1ef1c thi\u200b<\/div>\n<\/li>\n<\/ul>\n
        AI kh\u00f4ng sai nh\u01b0ng c\u00e1ch d\u00f9ng AI c\u00f3 th\u1ec3 sai\u200b<\/div>\n
        L\u1ed7 h\u1ed5ng l\u1ea7n n\u00e0y \u0111\u1eb7t ra m\u1ed9t c\u00e2u h\u1ecfi l\u1edbn: Li\u1ec7u ch\u00fang ta c\u00f3 \u0111ang \u0111\u00e1nh gi\u00e1 sai r\u1ee7i ro c\u1ee7a AI?<\/p>\n

        Trong khi c\u00e1c cu\u1ed9c ki\u1ec3m tra an to\u00e0n AI t\u1eadp trung v\u00e0o h\u00e0nh vi c\u1ee7a m\u00f4 h\u00ecnh, th\u00ec th\u1ef1c t\u1ebf cho th\u1ea5y m\u1ed1i nguy l\u1edbn h\u01a1n l\u1ea1i n\u1eb1m \u1edf c\u00e1ch c\u00e1c th\u00e0nh ph\u1ea7n h\u1ec7 th\u1ed1ng t\u01b0\u01a1ng t\u00e1c v\u1edbi nhau. M\u1ed9t AI an to\u00e0n v\u1eabn c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh c\u00f4ng c\u1ee5 nguy hi\u1ec3m n\u1ebfu n\u00f3 \u0111\u01b0\u1ee3c \u0111\u1eb7t trong m\u1ed9t h\u1ec7 th\u1ed1ng thi\u1ebfu ki\u1ec3m so\u00e1t.<\/p>\n

        Trong truy\u1ec1n th\u00f4ng c\u00f4ng ngh\u1ec7, ng\u01b0\u1eddi ta hay n\u00f3i v\u1ec1 \u201cAI s\u1ebd thay \u0111\u1ed5i th\u1ebf gi\u1edbi\u201d. Nh\u01b0ng c\u00f3 l\u1ebd c\u00e2u \u0111\u00fang h\u01a1n l\u00e0: c\u00e1ch ch\u00fang ta t\u00edch h\u1ee3p AI m\u1edbi l\u00e0 th\u1ee9 quy\u1ebft \u0111\u1ecbnh th\u1ebf gi\u1edbi s\u1ebd an to\u00e0n hay r\u1ee7i ro h\u01a1n.\u200b<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

        AI \u0111ang \u0111\u01b0\u1ee3c \u0111\u01b0a th\u1eb3ng v\u00e0o quy tr\u00ecnh ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m, m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong c\u00f4ng c\u1ee5 Gemini CLI c\u1ee7a Google v\u1eeba \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 \u0111\u00e3 cho th\u1ea5y r\u1ee7i ro kh\u00f4ng n\u1eb1m \u1edf tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o m\u00e0 n\u1eb1m \u1edf c\u00e1ch con ng\u01b0\u1eddi t\u00edch h\u1ee3p n\u00f3 v\u00e0o h\u1ec7 th\u1ed1ng. L\u1ed7 h\u1ed5ng th\u1ef1c […]<\/p>\n","protected":false},"author":20,"featured_media":47807,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47806","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47806"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47806\/revisions"}],"predecessor-version":[{"id":47808,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47806\/revisions\/47808"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47807"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}