Gemini CLI v0.60.0 hardens sandboxing and path boundaries, purges leaked CrUX API key
gemini-cli-robot · ghdev · 2026-09-16
google-gemini/gemini-cli v0.60.0 is a security-focused release:
- Hardening sweep: RFC 9207 issuer identification in MCP OAuth, path resolution hardening in the extension loader, workspace boundary checks and symlink resolution fixes, strict permission/ownership checks on system-wide config paths, and NTFS 8.3 short-name mitigation.
- Secret cleanup: removed and sanitized a hardcoded Google CrUX API key in chrome-devtools-mcp.
- Environment safety: consent prompts on environment changes and sanitization of runtime-altering env vars.
- Sandboxing: isolated temp/settings directories for macOS Seatbelt and containers, plus improved web fetch destination validation.
More from coding & agent
- General Reasoning explains how to train agent swarms with RL and latency pressure — rosstaylor90 · 2026-11-02
- "Coding isn't the bottleneck anymore — usage windows are," says founder Kyle Gawley — kylegawley · 2026-11-02
- Demo passed ≠ production-ready: 5 questions to answer before letting agents run your business — _kellhus · 2026-11-02
- An AI agent passed 100 test chats—still not ready to run the business — djgoel123 · 2026-11-02
- Agent given total creative freedom produces a 1:44 code-drawn animated short film — ivegotnoidea1 · 2026-11-02
- Meme: Wake Up, Use Claude Code, Repeat All Day — tekbog · 2026-11-02