Gemini CLI nightly patches indirect prompt injection and hardens sandbox filesystem
gemini-cli-robot · ghdev · 2026-09-12
google-gemini/gemini-cli shipped nightly v0.61.0-nightly.20260912 with two security fixes: preventing indirect prompt injection via build file modifications and untrusted flags (PR #29250), and hardening filesystem boundaries plus isolating runtime state in the sandbox (PR #29214).
More from coding & agent
- Todoist's self-healing agent auto-fixes 1 in 5 Sentry issues and opens PRs — zeeg · 2026-10-31
- Dev's Multica 1.0 build log: 432M tokens, 89 agent runs, just $183 — jiayuan_jy · 2026-10-31
- Stardock's QA now runs agents that play the game and file reports — draginol · 2026-10-31
- Limma MCP structures unstructured data end-to-end so agents never miss a detail — FlimsyIngenuity7248 · 2026-10-31
- Agent audit metric: can you name which tests ran and files changed without reading its summary? — ronbodkin · 2026-10-31
- FlowSense MCP lets Claude Code inspect and firewall your Mac's network traffic locally — hani_q · 2026-10-31