Google Gemini CLI patch blocks $VAR and ${VAR} shell-expansion bypass
thalha-a9 · ghdev · 2026-07-15
A Google Gemini CLI pull request fixes a shell-safety bypass that let $VAR and ${VAR} expansion slip past the security gate.
- The patch hardens both Bash and PowerShell detection in detectBashSubstitution() and detectPowerShellSubstitution().
- It adds a safe allowlist for automatic variables, expands test coverage to 120 cases, and tightens the GitHub workflow by clearing GITHUBTOKEN in the sandboxed environment.
- The PR reports green CI, passing pre-commit hooks, and a single verified call site with no unintended side effects.
More from coding & agent
- Tweaked orchestration skill turns agents into self-policing workflow — pvncher · 2026-07-27
- A practical map of 11 protocols in the modern AI agent stack — TheTuringPost · 2026-07-27
- Qwen Code nightly adds Goal v3 orchestration and workspace channel controls — qwen-code-ci-bot · 2026-07-27
- NVIDIA says Nemotron 3 Ultra hit 97.1% on agentic RTL chip-design tasks — NVIDIAAI · 2026-07-27
- Tokyo Agent Forge hackathon shipped production-ready AI agents in one day — DavidBennett__ · 2026-07-27
- Long-running agents will need immutable event logs, this thread argues — sebpaquet · 2026-07-27