Gemini CLI v0.59.0 fixes MCP OAuth SSRF, enforces fail-closed workspace trust
gemini-cli-robot · ghdev · 2026-09-09
Google released Gemini CLI v0.59.0 with two notable security fixes:
- SSRF fix in MCP OAuth metadata discovery and authentication: a malicious MCP server could previously trick the CLI into making requests to internal network endpoints (PR #29081)
- Fail-closed workspace trust and mcpServers filtering in restricted mode: untrusted workspaces no longer default to allowed, and mcpServers configs are filtered in restricted mode (PR #29099)
Developers using Gemini CLI with MCP on untrusted repositories should upgrade promptly.
More from coding & agent
- Stanford's PaperFormalizer turns research papers into Lean-verified versions with author in the loop — StanfordUniversity · 2026-10-27
- Hugging Face TRL makes score centering + masked importance sampling default in async GRPO — _lewtun · 2026-10-27
- AutoResearch agent's weird training curve gets dug into instead of discarded — ZimingLiu11 · 2026-10-27
- Firecrawl offers 2.5x credits to a16z Speedrun founders, unveils $75M Series B — devdigest · 2026-10-27
- Chums: open-source Apple Watch app puts Claude Code and Codex on your wrist — brandon_galang · 2026-10-27
- Open-source Clairic Studio turns pasted text into typed data and working code in 5 languages — dfinke · 2026-10-27