gemini-cli PR #30071 routes MCP OAuth fetches through safe dispatcher to stop DNS rebinding
ranas-mukminov · ghdev · 2026-11-01
PR #30071 in google-gemini/gemini-cli fixes a security gap: MCP OAuth metadata and registration fetches were validated only at check time but then sent through the plain global dispatcher, enabling a DNS-rebinding scenario (public resolution at check, private at connect). The change routes fetchProtectedResourceMetadata(), fetchAuthorizationServerMetadata() and registerClient() through the dispatcher from createSafeAgent(); explicitly allowed private/loopback servers keep working. 505 targeted tests passed, typecheck/lint/build clean. Author notes it's hardening only — no live rebinding demo, no credential exposure, token exchange untouched.
More from coding & agent
- Indie dev launches EasyComfy Pro: ComfyUI workflows as one-click presets with MCP support — Dependent-Heat3770 · 2026-11-01
- Human-in-the-Loop theater: Devs rubber-stamp Claude's 400-line 'dangerous' bash scripts — rickasaurus · 2026-11-01
- One Claude Code command audits your Managed Agents setup against Anthropic's security guide — brada · 2026-11-01
- Claude-Code-Game-Studios: open-source template turns Claude Code into a 49-agent game studio — lxfater · 2026-11-01
- OpenMoat: open-source local policy checks to secure AI coding agents with machine access — __dotk__ · 2026-11-01
- Senior engineer: 'popularity is the weights of an LLM' — half of 600 engineering scars can't be baked into models — RandalSchwartz · 2026-11-01