Gemini CLI Security Fix: Preventing Code Injection via Extension Environment Variables
amelidev · ghdev · 2026-08-18
A PR for Google Gemini CLI addresses a security vulnerability where extension updates could bypass user consent checks and inject unauthorized environment variables into spawned MCP server processes.
Fix Details:
- Consent Change Detection: Custom environment variables defined in the extension manifest are now included in the consent string. Modifying environment configs now correctly forces a consent verification dialog.
- Subprocess Sanitization: A set of blocked runtime-altering environment variables (e.g., NODEOPTIONS, PYTHONPATH) was introduced. Any key matching this set is ignored during the MCP server environment merge to block potential execution preload attacks.
The PR includes automated unit tests to verify the fixes.
More from Infra
- DSCO Router Launches Unified Gateway for Multi-Model Routing with BYOK Support — arthurcolle · 2026-08-24
- Open Source RobotSoul: Persistent Identity for Agents After Context Resets — robauto-dot-ai · 2026-08-24
- Offloading MoE models to RAM causes slow prefill speeds — former_farmer · 2026-08-24
- Etched Raises $1B Led by Jane Street to Validate Architecture-Agnostic AI Chips — TheTuringPost · 2026-08-24
- ConvRot Quant joins llama-cpp: Q6 accuracy nears Q8 quality — giveen · 2026-08-24
- LifeOS: A Local, Voice-Driven Personal Organizer — Extension-Bid-639 · 2026-08-24