Gemini CLI Patch Fixes Variable Expansion Bypass Vulnerability
thalha-a9 · ghdev · 2026-08-19
This PR fixes incomplete checks in detectBashSubstitution() and detectPowerShellSubstitution() that allowed variable expansion patterns to bypass security gates added for GHSA-wpqr-6v78-jr5g. It also implements defense-in-depth hardening for the gemini-automated-issue-dedup.yml workflow. Changes include blocking ${VAR} and $VAR in shell-utils.ts with an allowlist for safe automatic variables, validated by 120 test cases covering dual-platform scenarios and edge cases.
More from Safety
- DeepMind Pentagon Contract Shows Why Trust is Not Governance — BlackHC · 2026-08-19
- Frontier AI worker: NDAs shouldn't silence evidence-based AGI risk concerns — BlackHC · 2026-08-19
- Paper reveals 10+ security breaches in AI Agents with real access — socialwithaayan · 2026-08-19
- DiSCO defends text-to-image models via prompt optimization without model changes — kaust-generative-ai · 2026-08-19
- David Deutsch updates views on AGI alignment and international coordination — danfaggella · 2026-08-19
- An agent nuked half an Obsidian vault; author proposes sandboxed tool execution — pauliusztin · 2026-08-19