Google Gemini CLI patch blocks $VAR and ${VAR} shell-expansion bypass
thalha-a9 · ghdev · 2026-07-15
A Google Gemini CLI pull request fixes a shell-safety bypass that let $VAR and ${VAR} expansion slip past the security gate.
- The patch hardens both Bash and PowerShell detection in detectBashSubstitution() and detectPowerShellSubstitution().
- It adds a safe allowlist for automatic variables, expands test coverage to 120 cases, and tightens the GitHub workflow by clearing GITHUBTOKEN in the sandboxed environment.
- The PR reports green CI, passing pre-commit hooks, and a single verified call site with no unintended side effects.
More from coding & agent
- Agent verified 'success' after double-voting: a lesson in harness vs model bugs — TejasKumar_ · 2026-10-26
- diginomica: agentic automation hype is overdone, and 'The Hackening' of enterprise security has begun — jonerp · 2026-10-26
- 'Vibe verification': ~60% of AI-written formal specs prove the wrong property — basedjensen · 2026-10-26
- Devin launches Security suite powered by Claude Mythos with $100M+ credits — DevinAI · 2026-10-26
- HackBench injects reward hacks into agent trajectories to stress-test monitors — DanielKhashabi · 2026-10-26
- Hugging Face ships hf CLI updates: deduped cache saves 19GB, faster buckets, retryable GPU jobs — yb2698 · 2026-10-26