Gemini CLI Patch Fixes Variable Expansion Bypass Vulnerability

thalha-a9 · ghdev · 2026-08-19

This PR fixes incomplete checks in detectBashSubstitution() and detectPowerShellSubstitution() that allowed variable expansion patterns to bypass security gates added for GHSA-wpqr-6v78-jr5g. It also implements defense-in-depth hardening for the gemini-automated-issue-dedup.yml workflow. Changes include blocking ${VAR} and $VAR in shell-utils.ts with an allowlist for safe automatic variables, validated by 120 test cases covering dual-platform scenarios and edge cases.

Original post →

More from Safety

Safety channel →