Gemini CLI v0.60.0-preview hardens sandboxing, OAuth and path security

gemini-cli-robot · ghdev · 2026-09-09

gemini-cli v0.60.0-preview.0 focuses on security fixes: RFC 9207 issuer identification in MCP OAuth, macOS Seatbelt temp dir isolation, hardened extension path validation with consent prompts, removal of a hardcoded Google CrUX API key, workspace boundary and symlink checks, config permission enforcement, and NTFS 8.3 short-name mitigation.

Original post →

More from coding & agent

coding & agent channel →