Gemini CLI nightly hardens A2A server to block an RCE path
gemini-cli-robot · ghdev · 2026-07-22
Gemini CLI nightly release tightens A2A server isolation
Google Gemini CLI v0.52.0-nightly.20260722.gc776c665b adds a security fix in a2a-server: it now enforces workspace trust and task isolation to prevent remote code execution.
The release is a small but concrete hardening update for an AI coding tool, focused on closing an RCE path rather than adding new features.
More from coding & agent
- Agent verified 'success' after double-voting: a lesson in harness vs model bugs — TejasKumar_ · 2026-10-26
- diginomica: agentic automation hype is overdone, and 'The Hackening' of enterprise security has begun — jonerp · 2026-10-26
- 'Vibe verification': ~60% of AI-written formal specs prove the wrong property — basedjensen · 2026-10-26
- Devin launches Security suite powered by Claude Mythos with $100M+ credits — DevinAI · 2026-10-26
- HackBench injects reward hacks into agent trajectories to stress-test monitors — DanielKhashabi · 2026-10-26
- Hugging Face ships hf CLI updates: deduped cache saves 19GB, faster buckets, retryable GPU jobs — yb2698 · 2026-10-26