Google Gemini CLI patch blocks $VAR and ${VAR} shell-expansion bypass
thalha-a9 · ghdev · 2026-07-15
A Google Gemini CLI pull request fixes a shell-safety bypass that let $VAR and ${VAR} expansion slip past the security gate.
- The patch hardens both Bash and PowerShell detection in detectBashSubstitution() and detectPowerShellSubstitution().
- It adds a safe allowlist for automatic variables, expands test coverage to 120 cases, and tightens the GitHub workflow by clearing GITHUBTOKEN in the sandboxed environment.
- The PR reports green CI, passing pre-commit hooks, and a single verified call site with no unintended side effects.
More from coding & agent
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11
- How Do You Catch Behavioral Regressions in LLM Agents Between Releases? — Beautiful_Belt_601 · 2026-09-11
- Treating agents like 50 First Dates: a 3-layer context system so every conversation doesn't start from zero — evielync · 2026-09-11
- Running the Firefox MCP on Android via Termux, ngrok, and mcp-proxy — Nervous-Strain7544 · 2026-09-11
- Run Firefox MCP on Android: Termux + ngrok tunnel tutorial — Nervous-Strain7544 · 2026-09-11