Gemini CLI patch fixes path traversal in legacy checkpoint fallback enabling arbitrary JSON file access
mr8lu · ghdev · 2026-10-23
PR #29876 in google-gemini/gemini-cli fixes a path traversal bug in Logger.getCheckpointPath() and deleteCheckpoint(). When falling back to the legacy unencoded checkpoint filename, a tag containing ../ segments could escape the checkpoints directory via path.join normalization, letting attackers read, probe, or delete arbitrary .json files. The fix adds a legacyCheckpointPath() guard validating a flat basename within geminiDir, plus regression tests covering traversal tags. Closes #29191.
More from coding & agent
- Dev uses Codex to remotely root a Samsung TV and strip eMudhra root certificates — charliermarsh · 2026-10-23
- Stop keeping agent sessions local: shared traces enable self-improving agents — vikvang1 · 2026-10-23
- Ex-DeepMind coding agent lead solo-founds Wajo, hires humans for the last mile — julianweisser · 2026-10-23
- Open-source trace waterfall component shows exactly where your agent's time goes — zsakib_ · 2026-10-23
- LangChain's Harrison Chase asks: should the agent runtime be called 'agent server'? — hwchase17 · 2026-10-23
- ADMET-EvO: a 7-step evidence-gated architecture for self-evolving AI agents — MaryamMiradi · 2026-10-23